Internal memo: FBI said it is "operating under the premise" that a threat actor stole PII of all employees; ShinyHunters set a Tuesday deadline tied to demands (New York Times)

The FBI’s reported assumption that a threat actor may have stolen the PII of all employees signals a high-severity insider/identity-data exposure with broad legal, HR, and reputational consequences. For CIOs and technology leaders, the key implication is that employee data is now a critical attack surface that can disrupt operations, increase fraud risk, and trigger urgent disclosure and response requirements. IT organizations should treat this as a test of their ability to rapidly confirm scope, contain exposure, and coordinate security, privacy, and communications under pressure.