Alleged Leader of ShinyHunters Extortion Group Arrested in Netherlands

Dutch National Police arrested a 24-year-old man in Amsterdam accused of leading ShinyHunters, a cybercrime group behind a wave of extortion attacks since 2025, including a recent claimed breach of FBI systems. While officials have not officially named the suspect, independent journalist Brian Krebs identified him as Pepjin van der Stap, a previously convicted cybercriminal who had also worked in the cybersecurity industry.

According to the FBI's cyber division, the group and its alleged leader have breached more than 140 organisations and extorted at least $70 million from victims. ShinyHunters is known for targeting third-party vendors and cloud-based platforms, stealing sensitive data and threatening to publish it unless paid. Past victims reported this year include Instructure, Salesforce, Snowflake and McKesson. Dutch police say they recovered significant evidence from the suspect's laptop, and a Rotterdam court has ordered him held for at least 90 days pending trial.

The arrest represents a significant step in international efforts to dismantle the group, though FBI Director Kash Patel says investigators are pursuing further leads based on evidence gathered so far.