THE FBI has confirmed a data breach affecting thousands of bureau employees’ personal information, with Reuters reporting that the incident involved a security patch that was not applied by a contractor responsible for the affected system. The FBI’s cyber chief, Brett Leatherman, said the breach occurred due to a security failure of a platform managed by a third party, specifically noting that a contractor failed to implement a security patch issued to secure the platform. As a consequence, the FBI removed the contractor and initiated steps to mitigate further risk and protect the workforce.
According to Reuters, the system involved is Oracle’s PeopleSoft human resources platform, and the external organisation linked to the incident is Accenture. The article indicates that the breach centreed on the contractor’s failure to apply the patch, rather than a direct FBI compromise, and that authorities are taking measures to mitigate ongoing risks to personnel data.
The report underscores the role of a subcontractor in a critical government system and highlights the importance of timely patch management when third‑party platforms underpin sensitive employee information.