Brett Leatherman is most often covered alongside FBI, which appears in 3 of these 3 stories. data-breach accounts for 2 of the 3 tracked stories, while 1 other category carries the remainder. Source depth averages 2 original sources per story, versus 2.6 across the same-window beat baseline.
Figures are computed live from our source-verified story record
— see our methodology for how impact and
sentiment are derived.
What the coverage shows about Brett Leatherman
Brett Leatherman is most often covered alongside FBI, which appears in 3 of these 3 stories. data-breach accounts for 2 of the 3 tracked stories, while 1 other category carries the remainder. Source depth averages 2 original sources per story, versus 2.6 across the same-window beat baseline. Their average consequence score of 8 runs above the beat's 7.2 for that window. Brett Leatherman appears in 3 tracked Cybersecurity stories published from September 25, 2026 through September 30, 2026.
Stories tracked
3
Sources per story
2
Computed from the 3 stories linked to this entity, with beat comparisons drawn from all 26 Cybersecurity stories published in the same date window. Shares are omitted below five stories and comparisons below a twenty-story baseline.
Coverage cohort
Appears alongside
Other entities that clear the same relevance threshold in stories also covering Brett Leatherman. Shared-story counts are live from our verified record — not editorial picks.
An FBI spokesperson tells NPR the bureau is working around the clock to investigate the FBIJobs.gov cyber incident and is in regular communication with potentially impacted individuals.
FBI cyber chief issues public warning
Assistant Director Brett Leatherman posts a video directly addressing ShinyHunters, vowing to find group members and urging them to come forward while the choice remains theirs.
ShinyHunters defaces FBIJobs.gov
Late last week, ShinyHunters posts a defacement message on FBIJobs.gov claiming responsibility for stealing sensitive FBI employee data; the site is temporarily taken down.
FBIJobs.gov remains offline
The FBI jobs website was still down as of Thursday afternoon as the bureau worked with third-party providers to mitigate risk.
FBI confirms investigation
The FBI confirmed it was investigating the claims and said the point of breach remained undetermined, whether a third-party provider or the FBI's enterprise.
FBI advisory characterizes ShinyHunters
The FBI issued an advisory describing ShinyHunters as threat actors who often use real or exaggerated claims of access to sensitive information to prompt payment and may falsely claim to have compromising information.
The FBI's cyber division publicly vowed to hunt down ShinyHunters after the group defaced FBIJobs.gov and claimed to steal sensitive employment records. Security teams should watch how the bureau determines whether a third-party vendor or internal system was the initial access point.
Dutch police have arrested the alleged leader of ShinyHunters, the extortion group behind 140+ breaches and at least $70 million in payments since 2025. The suspect, identified as Pepijn van der Stap, was working at a Dutch security firm and is now linked to two alleged murder plots. The arrest hands investigators a seized laptop likely to expose infrastructure, affiliates, and additional victims.
The cybercrime group ShinyHunters claims it compromised FBIJobs.gov and stole sensitive personally identifiable information on thousands of agents and applicants. The FBI says the breach point is undetermined and is investigating. Security leaders should treat the claim as unverified but operationally significant.