IC Technology & Cyber — 2026-09-29
Dutch Police Arrest Suspected ShinyHunters Member as Hackers Pledge Not to Publish Stolen FBI Employee Data
BLUFShinyHunters is unlikely to publish the stolen FBI personnel data by October 31, but the multi-terabyte dataset remains a latent counterintelligence risk if passed to foreign services.
Dutch police confirmed on Monday the arrest of a 24-year-old in the ShinyHunters investigation, with a Rotterdam court appearance set for Tuesday 12. KrebsOnSecurity, citing sources, named him as Pepijn van der Stap, a convicted data thief arrested around September 16, while his employer Neo Security told Reuters he was seized in a raid on September 15 12. NL Times noted police have not publicly linked him to the Odido caller recording, and a ShinyHunters representative told CBC and 404 Media he has no association with the group 234. Days after the arrest, ShinyHunters claimed the FBI jobs-site breach, and it told 404 Media on Monday it never intended to publish the data, which the group's sample showed covers more than 5,000 FBI personnel 14.
AnalysisShinyHunters is
unlikely to publish the stolen FBI personnel data on a leak site or forum by October 31. The group now calls the breach a marketing campaign, has deleted its leak-site announcement, and would gain no extortion payoff while inviting a harder federal response. That reverses last week's one-week extortion ultimatum. Confidence is high because the group's statements, the deleted post, and the FBI's confirmation align, though the two independent primary reports (Krebs on the arrest, 404 Media on the data) carry the sourcing, and CBC and NL Times largely relay Krebs. The pledge may instead be a tactic to ease law-enforcement pressure while the group sells the data privately or a splinter faction such as Rey's SLSH leaks it. The 5,000-record sample is already with media and a researcher, and the full two to three terabytes remain with the group. Foreign intelligence services are the likelier end users, so the FBI should prioritize counterintelligence exposure and long-term identity protection over emergency relocation, unless publication occurs.
4 sources
- Dutch Police Arrest Reformed Hacker in Shiny Hunters Investigation - KrebsOnSecurity
- Dutch police arrest security professional in ShinyHunters investigation - CBC News
- Dutch authorities arrest suspected ShinyHunters member in Odido hack probe - NL Times
- FBI Hackers Say They Won't Publish Massive Trove of FBI Employee Data - 404 Media
View in full brief →