Security News

FBI Arrests Canadian Cyber Executive as Net Tightens on ShinyHunters

Infosecurity Magazine · 12 Oct 2026
Key Takeaway Keep business software patched and check that third-party vendors managing your platforms do the same, because a single unpatched system can give attackers a path into your wider cloud data.

The FBI has arrested a Canadian cybersecurity executive on suspicion of links to ShinyHunters, the group believed to be behind a serious breach at the bureau in September 2026. FBI director Kash Patel confirmed the arrest on X on October 9 without naming the person. Court documents identify him as Edward Dubrovsky, 54, a Toronto-based cyber founder and investor. He is charged with conspiracy to threaten to impair the confidentiality of information with intent to extort money, and interference with commerce by threats.

Dubrovsky is reportedly a former managing director at incident response firm Cypfer and is currently associated with cyber-consulting firm CyberSteward. He also wrote a book on responding to cyber extortion, marketed as a practical manual for leaders on negotiation and settlement strategies. Patel described the arrest as the latest in a matter of days involving the network.

Other arrests have followed the incident. Dutch police arrested convicted cybercriminal Pepijn van der Stap, and a 17-year-old, Saif Al-din Khader, was taken into custody in Jordan on September 29 and is said to be cooperating with investigators. The breach affected the FBIjobs.gov site, which ran on a platform managed by a third-party vendor. ShinyHunters reportedly exploited a vulnerability in Oracle PeopleSoft, then moved to the agency's AWS GovCloud servers and extracted 2-3TB of data.

Carrying this risk through a supplier? Assessing third-party and supply chain security ->

Summarised by CISO AI from Infosecurity Magazine, written with Claude Sonnet 5.5. We link back to every original so you can read it yourself.