Special agents' blood and urine test results stolen in FBI hack

Cyber-criminals who hacked the FBI say they have extremely sensitive medical data for thousands of its special agents.

BBC News has seen samples of the stolen "fitness-for-work" medical examinations, which contain information such as blood and urine test results, and doctors' notes mentioning conditions such as a "shellfish and banana allergy".

The records include agents' full names and addresses, as well as references to medical concerns including 'blood in the urine' and 'high cholesterol'.

Experts say the hack - which the FBI is investigating - could leave agents vulnerable to scams, blackmail and targeted attacks, as well as help criminals impersonate law enforcement officers.

"The list maps thousands of agents against their medical and fitness records," said Etay Maor, vice-president of threat intelligence at Cato Networks.

"Passwords can be reset if stolen, but medical records cannot, so once this data is out, it stays compromised for good. That permanence, applied across an entire workforce, is what makes this leak so serious."

The FBI has not responded to requests for comment. However, on Wednesday it acknowledged the breach and said it was "aggressively investigating" how it happened.

The cyber-criminal group ShinyHunters claims it breached FBI systems on Monday, and later posted details of the attack on its darknet site.