The FBI has confirmed it is investigating a breach of an internal network used to manage court-authorized wiretaps and foreign intelligence surveillance warrants.

The bureau detected “suspicious activities” and claims to have already addressed the incident using its full technical capabilities. 

Scope of the Breach

• Systems Affected: The breach touched a digital platform used for managing surveillance operations, including the Digital Collection Systems Network. This suite handles real-time interception, pen registers (logging dialed numbers), and “trap and trace” surveillance.
• Data Exposed: The affected system contains law enforcement sensitive information, including personally identifiable information (PII) of investigation subjects and returns from legal processes.
• Classification: According to a notification sent to Congress, the targeted system is unclassified but holds highly sensitive operational data.

Context and Suspected Actors

While the FBI has not named a specific culprit, the incident follows a pattern of sophisticated nation-state targeting: 

• Salt Typhoon Connection: Investigators are looking into whether this is linked to Salt Typhoon, a Chinese state-backed group that previously compromised U.S. telecommunications providers (like AT&T and Verizon) to access “lawful intercept” systems.
• Internal Upheaval: Media reports indicate the breach was discovered on February 17, 2026. It occurs amid significant leadership changes and staff turnover within the FBI’s cybersecurity and counterintelligence divisions under the current administration.