The ShinyHunters hacking group claimed that data taken from the Federal Bureau of Investigation included sensitive psychiatric and medical evaluations of bureau personnel. The allegation expanded the apparent scope of a breach that the group had earlier said affected information on thousands of FBI employees.
Samples circulated by the hackers included an electrocardiogram, a portion of a psychiatric evaluation and material from a pre-employment physical examination. The documents contained health details that would normally be protected because they concern personal conditions and assessments connected to federal employment.
Reuters cross-checked Social Security numbers, employment dates and the names of medical professionals appearing in the sample, and several details aligned with other information. A source also said one identified medical professional was examining FBI agents during the period reflected in the documents.
Those checks offered partial support for the authenticity of the sample, but they did not establish that every file or the hackers' complete claim was genuine. ShinyHunters reportedly described a much larger trove measured in terabytes, whose full contents and provenance were not independently verified.
The FBI did not immediately respond to requests for comment on the medical-record allegation. Without an official account, key questions remained unanswered, including how the information was accessed, how many people were affected and whether the compromised system had been contained.
Medical and psychiatric records create risks beyond ordinary identity theft because they can reveal diagnoses, treatment histories and professional suitability assessments. Their exposure could affect privacy and personal security while also providing material for coercion, fraud or targeted social-engineering attempts.
The incident therefore combines a disputed cybercrime claim with evidence requiring continued authentication. The verified identifiers make the sample difficult to dismiss, but the absence of a complete forensic account means the scale, technical route and institutional consequences must remain qualified rather than presented as settled facts.
