The FBI has arrested an alleged co-conspirator linked to ShinyHunters, the criminal hacking group that claimed responsibility for breaching the bureau’s jobs portal and obtaining personal information on nearly all FBI employees.

FBI Director Kash Patel announced the arrest Friday, describing it as the latest development in an ongoing international investigation into the cyberattack. The breach occurred on a platform managed by a third-party vendor, Patel said, raising concerns about the security of systems used by federal law enforcement agencies.

“We will continue to work closely with our partners to disrupt what’s left of the ShinyHunters group and their associates, no matter where they operate,” Patel said in a statement.

Authorities had not immediately identified the person arrested or disclosed what charges the individual might face. The FBI continues to investigate the breach and pursue others allegedly connected to the hacking operation.

ShinyHunters claimed responsibility for the intrusion last month, alleging that it had collected sensitive personal data through the compromised portal. The group said the attack was retaliation for what it described as false allegations in an FBI public advisory issued in May.

That advisory characterized ShinyHunters as a cybercriminal organization specializing in large-scale data breaches and extortion. The FBI warned that the group and similar actors may exaggerate or fabricate claims about accessing sensitive information to pressure victims into paying them. Such groups may also threaten or harass individuals using claims of possessing compromising material that may not actually exist.

The alleged breach has raised security concerns because of the potential consequences for FBI personnel and their families. Cybersecurity experts warned that exposed personal information could be exploited for extortion, harassment, swatting attacks or other forms of intimidation. Reports that the compromised information also included employees’ spouses added to concerns about the potential reach of the incident.

The case highlights the risks federal agencies face when outside vendors manage platforms connected to sensitive operations or employee information. Even when an intrusion occurs through a third-party system, the resulting exposure can create serious security challenges for the government and the people who work for it.

The FBI has not publicly confirmed the full scope of the compromised information, and the identity of the arrested suspect remains unknown.