FBI ShinyHunters Investigation: Multiple Arrests Confirmed
FBI Confirms Multiple Arrests in ShinyHunters Investigation The Federal Bureau of Investigation has confirmed the apprehension of several individuals linked to the ShinyHunters cyber extortion group following the detention of a suspected member in Jordan.
FBI Confirms Multiple Arrests in ShinyHunters Investigation
The Federal Bureau of Investigation has confirmed the apprehension of several individuals linked to the ShinyHunters cyber extortion group following the detention of a suspected member in Jordan. The arrest of Saif al-Din Khader, who operates under the alias “Rey,” was reported by multiple sources, including Reuters, which noted his capture on September 29. Khader is reportedly cooperating with law enforcement agencies, including the FBI, to provide insights into the group’s operations and associated networks.
The bureau did not disclose the identities of those arrested or confirm Khader’s direct involvement in the recent arrests, but it highlighted ongoing collaborations with international partners to dismantle the group’s activities.
International Law Enforcement Actions Expand
The arrest of Khader followed a separate operation in the Netherlands, where authorities detained a 24-year-old man identified as Pepijn van der Stap, known online as “Umbreon,” on September 15. The FBI described van der Stap as an alleged leader of ShinyHunters, citing claims that the group compromised over 140 organizations and extorted at least $70 million since 2025. Dutch authorities have not officially named the individual, but independent reports corroborate his identity.
ShinyHunters has denied any association with van der Stap, though the FBI has acknowledged the Dutch arrest without disclosing further details. The arrests coincide with the FBI’s probe into the September breach of FBIJobs.gov, which ShinyHunters claimed involved the theft of sensitive data related to current, former, and prospective FBI employees. The group later characterized the incident as a publicity stunt rather than a financial motive.
Ongoing Presence of ShinyHunters’ Data Leak Platform
As of the latest update, the group’s data leak website remains active, displaying existing victim lists and operational details. The continued availability of the platform suggests that the group’s infrastructure has not been disrupted despite recent law enforcement actions. The absence of new claims or updates from ShinyHunters raises questions about whether the investigation has impacted its ability to operate or if the group is temporarily inactive.
FBI Alerts to Potential Additional Arrests
Brett Leatherman, assistant director of the FBI’s Cyber Division, warned that the seizure of infrastructure and ongoing arrests could expose remaining members of the organization.
However, the bureau has provided limited information about the individuals it claims have been detained,
About Author
English