\n<\/p>\n
The FBI and Dutch law enforcement say they have arrested a member of the ShinyHunters hacking group, which the agencies say are responsible for hacks on over 140 organizations around the world. The hackers also claimed responsibility for a breach of the FBI\u2019s own systems earlier this month.<\/p>\n
Brett Leatherman, the FBI\u2019s cyber division lead, said in a video message<\/a> on Tuesday that Dutch authorities had arrested one of the \u201calleged leaders of ShinyHunters.\u201d Leatherman added that the Dutch High Tech Crime Unit \u201cmoved quickly to protect victims and preserve critical evidence,\u201d and vowed that the bureau would go after the rest of the hackers following the arrest.<\/p>\n In a separate statement<\/a>, Dutch police confirmed that an unnamed 24-year-old man<\/a> from Amsterdam was arrested under Dutch law on September 15. The man was scheduled to appear in court on Tuesday and has been remanded into custody for at least 90 days.<\/p>\n The police say the man was arrested for \u201cparticipating in a criminal organization,\u201d referring to ShinyHunters.<\/p>\n Following his arrest and seizure of his devices, the police said \u201ca lot of information was found on his laptop, including about two murders that should be committed abroad.\u201d As such, he is also being investigated for attempting to orchestrate the murders. The Dutch authorities said this is \u201cseparate from the investigation into ShinyHunters.\u201d<\/p>\n ShinyHunters is a cyber criminal gang that is accused of hacking into companies to steal reams of data and then threatening to publish the data if its victims do not pay a ransom. The Dutch authorities said the gang is accused of data breaches at Pornhub<\/a>, Ticketmaster<\/a>, and U.S. telco giant AT&T<\/a>. The hacking group also took responsibility for a breach of Dutch phone provider Odido<\/a>. However, the authorities said that the man they took into custody has not been arrested in relation to the Odido hack.<\/p>\n Independent security journalist Brian Krebs<\/a>, who was first to report the arrest, and other media outlets have named the arrested man as Pepijn van der Stap, who was profiled by Bloomberg in 2024<\/a> as a cybersecurity researcher who also moonlighted as a criminal hacker who extorted companies.<\/p>\n According to recent reporting by Bloomberg<\/a> and Reuters<\/a>, van der Stap was arrested earlier this month by police at the offices of Neo Security, where he is employed as chief technology officer. The raid reportedly involved flash-bang grenades.<\/p>\n A representative for Neo Security did not immediately respond to TechCrunch\u2019s request for comment. When asked by TechCrunch, a representative of the ShinyHunters group told TechCrunch that van der Stap \u201chas no association with us.\u201d<\/p>\n News of the arrest comes days after the FBI reportedly told its own agents and employees<\/a> that their personal information, including their names, addresses, job titles, and Social Security numbers, was exposed in a \u201ccyber security incident.\u201d The FBI has not yet publicly confirmed a breach, but the ShinyHunters gang said it took personal and sensitive data belonging to \u201cmostly all\u201d of the FBI\u2019s agents and applicants by breaching its careers website and job application portal.<\/p>\n Among the sample of 5,000 or so agents who had data stolen from the portal, reporters have also found data relating to agents\u2019 blood and urine samples<\/a>, as well as psychiatric reports<\/a>, which sparked fears of a major counterintelligence challenge to prevent an adversarial government from obtaining the data.<\/p>\n When contacted by TechCrunch, Leatherman did not comment. An FBI spokesperson declined to comment on our questions relating to the arrest.<\/p>\n For their part, the ShinyHunters hackers reiterated that the breach of the FBI\u2019s servers was not a financially motivated attack, but was intended to challenge public claims made by the FBI, which the hackers say contain false allegations about the group. The hackers told TechCrunch that they will not publish the stolen FBI data, and added that the breach was \u201cto make a point and to dispute the allegations made against us and we have done so.\u201d<\/p>\n<\/div>\n When you purchase through links in our articles, we may earn a small commission<\/a>. This doesn\u2019t affect our editorial independence.<\/em><\/p>\n