FBI Cyber relentlessly targets cyber attackers by leveraging unique authorities, advanced capabilities, and strong partnerships.
Hijacked networks, cryptocurrency theft, and corporate espionage highlight the growing cyber threat. Each year, adversaries grow more skilled, attacking energy networks, shutting down hospitals, and heightening global tensions. Government-backed actors target the US and critical infrastructure, while cyber criminals exploit vulnerabilities to steal money and extort data.
Combating these threats is the FBI’s cyber program’s primary mission. As the lead federal agency for investigating cyber attacks and intrusions, we engage with victims and work to unmask those committing malicious cyber activities wherever they are.
Learn more about nation‑state cyber attacks. Report cybercrime by visiting our official website and following the bureau’s ongoing efforts to combat the growing cyberthreat.
FBI Cyber on LinkedIn and X.
A Larger Than Ever Attack Surface.
Americans have witnessed major digital advances from smart cities to self-driving cars and AI technology. This expanding digital world also gives hostile actors more opportunities to attack. As we adopt these technologies, we must confront rising threats from both nation-states and cybercriminals.
China, Russia, Iran, and North Korea continue cyber attacks against US targets. Some grow more aggressive, infiltrating critical infrastructure and private networks. They seek not just intelligence and intellectual property but also the ability to harm the US.
Ransomware attacks can shut down companies and disrupt industries. Attackers operate in a complex network of developers, partners, and service providers. Purdes consistently evolving methods
Sharing Actionable Intelligence
The FBI connects with public and private sectors, building strong relationships and sharing useful threat information with key stakeholders.
Sharing information is a key part of our mission. We use our authority to warn the public about new online threats and to advise industry partners on how to find and stop them. We send out alerts as quickly as possible because threats and attack methods change fast.
How FBI Cyber Works
FBI Cyber’s scale team spans the US and 20 countries, ready to help after cyber incidents. Our mission: serve victims by sharing information and tools to address threats in real time.
We use our partnerships, expertise, global reach, and unique investigative and intelligence authorities to help victims in every engagement.
- The FBI has specially trained cyber squads in each of our 56 field offices, working hand in hand with interagency task force partners.
- The FBI leads the National Cyber Investigative Joint Task Force (NCIJTF), uniting over 30 D agencies from intelligence and law enforcement.
- The Rapid Response Cyber Action Team can deploy across the country within hours to respond to major incidents.
- Cyber assistant law enforcement attaches in the US and worldwide enable close work with international partners to seek justice for cybercrime. Victims
- The Internet Crime Complaint Center (IC3) collects reports of internet crime from the public. Using such complaints, the IC3’s recovery asset team has helped freeze hundreds of thousands of dollars for victims of cybercrime.
- CYWatch is the FBI’s 24-7 operations center and watch flow, providing around-the-clock support for tracking incidents and communication.
The FBI has declared a recent data breach of a surveillance system a major incident and notified Congress, the agency told The Hill on Friday.
FBI identified unusual activity on an unclassified network and quickly used its technical capabilities to address the incident. Access was obtained via a third party and classified as a major incident under the Federal Information Security Modernization Act (FISMA).
The FBI is following the required steps under FISMA, including notifying Congress, and remains focused on countering nationwide nation-state and cybercriminal activity. It continued.
Several news outlets have speculated that hackers linked to China may have carried out the breach.
Politico reports that the system held data from pen register and trap-and-trace devices, which track incoming and outgoing phone calls. The breach affected the personally identifiable information of individuals involved in FBI investigations, highlighting the risk of exposure for them.
The government defines a major incident under FISMA as any incident likely to cause demonstrable harm to the national security interests, foreign relations, or economy of the United States, according to 2025 guidance. An incident involving personally identifiable information may also be classified as major if it poses risks similar to those in this breach.
Source:The Cyber Threat
