CYBERSECURITYTRACKER
TRACKING
Permanent story citation

FBI confirms 'multiple' arrests related to ShinyHunters hack

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 9413

As cited

Copy frozen at (site build).

breaches incidents

FBI confirms 'multiple' arrests related to ShinyHunters hack

The FBI and law enforcement partners have arrested multiple suspects in connection with ShinyHunters, a data-theft-and-extortion group, including Saif al-Din Khader (alias Rey), detained in Jordan on September 29, and a 24-year-old arrested by Dutch National Police identified as Pepijn van der Stap. The arrests stem from investigations into major breaches including the August 2025 Jaguar Land Rover attack that disrupted manufacturing and exposed employee payroll data, as well as the September breach of the FBIJobs.gov portal. FBI leadership has publicly urged remaining members to cooperate, warning that seized infrastructure and witness cooperation will reveal their identities.

Why it matters: Organizations targeted by ShinyHunters and similar extortion groups should monitor law enforcement developments for indicators about group disruption and member cooperation, while security teams should review their defenses against data-theft-and-extortion tactics used in high-impact breaches like the JLR incident.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

breaches incidents

FBI confirms 'multiple' arrests related to ShinyHunters hack

The FBI and law enforcement partners have arrested multiple suspects in connection with ShinyHunters, a data-theft-and-extortion group, including Saif al-Din Khader (alias Rey), detained in Jordan on September 29, and a 24-year-old arrested by Dutch National Police identified as Pepijn van der Stap. The arrests stem from investigations into major breaches including the August 2025 Jaguar Land Rover attack that disrupted manufacturing and exposed employee payroll data, as well as the September breach of the FBIJobs.gov portal. FBI leadership has publicly urged remaining members to cooperate, warning that seized infrastructure and witness cooperation will reveal their identities.

Why it matters: Organizations targeted by ShinyHunters and similar extortion groups should monitor law enforcement developments for indicators about group disruption and member cooperation, while security teams should review their defenses against data-theft-and-extortion tactics used in high-impact breaches like the JLR incident.

Actorsshinyhunterslapsus$
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

breaches incidents

FBI confirms 'multiple' arrests related to ShinyHunters hack

The FBI and law enforcement partners have arrested multiple suspects in connection with ShinyHunters, a data-theft-and-extortion group, including Saif al-Din Khader (alias Rey), detained in Jordan on September 29, and a 24-year-old arrested by Dutch National Police identified as Pepijn van der Stap. The arrests stem from investigations into major breaches including the August 2025 Jaguar Land Rover attack that disrupted manufacturing and exposed employee payroll data, as well as the September breach of the FBIJobs.gov portal. FBI leadership has publicly urged remaining members to cooperate, warning that seized infrastructure and witness cooperation will reveal their identities.

Why it matters: Organizations targeted by ShinyHunters and similar extortion groups should monitor law enforcement developments for indicators about group disruption and member cooperation, while security teams should review their defenses against data-theft-and-extortion tactics used in high-impact breaches like the JLR incident.

VendorsGitHubGoogleOracle
Actorscloplapsus$shinyhunters
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

breaches incidents

FBI confirms 'multiple' arrests related to ShinyHunters hack

The FBI and law enforcement partners have arrested multiple suspects in connection with ShinyHunters, a data-theft-and-extortion group, including Saif al-Din Khader (alias Rey), detained in Jordan on September 29, and a 24-year-old arrested by Dutch National Police identified as Pepijn van der Stap. The arrests stem from investigations into major breaches including the August 2025 Jaguar Land Rover attack that disrupted manufacturing and exposed employee payroll data, as well as the September breach of the FBIJobs.gov portal. FBI leadership has publicly urged remaining members to cooperate, warning that seized infrastructure and witness cooperation will reveal their identities.

Why it matters: Organizations targeted by ShinyHunters and similar extortion groups should monitor law enforcement developments for indicators about group disruption and member cooperation, while security teams should review their defenses against data-theft-and-extortion tactics used in high-impact breaches like the JLR incident.

VendorsGitHubGoogleOracle
Actorscloplapsus$shinyhunters
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary