Dutch Police Arrest Alleged ShinyHunters Leader as Murder Plot Probe Opens
Dutch police arrest alleged ShinyHunters leader over 140-plus hacks, while laptop evidence sparks a separate probe into two planned murders in other countries.
Summary
Dutch police arrested an unnamed 24-year-old Amsterdam man on September 15 for alleged participation in ShinyHunters, which the FBI and Dutch authorities link to breaches of more than 140 organizations. FBI cyber division chief Brett Leathermann called him an alleged leader and said the Dutch High Tech Crime Unit protected victims and preserved evidence, while the FBI pledged to pursue other members. Publicly identified as Pepijn van der Stap, Neo Security’s chief technology officer, he was detained at the company’s offices during a raid reportedly involving flash-bang grenades. Neo Security did not comment, and ShinyHunters denied he was associated with the group. He was due in court September 29 and remanded for at least 90 days.
Police said seized devices contained extensive information about two murders planned abroad, prompting a separate investigation into attempted orchestration. ShinyHunters allegedly steals corporate data and demands ransom under threat of publication, with breaches involving Pornhub, Ticketmaster, AT&T and Dutch carrier Odido, although this arrest is unrelated to Odido. The group also claimed a September breach of the FBI careers website and application portal exposed names, addresses, job titles and Social Security numbers for almost all agents and applicants. A roughly 5,000-agent sample reportedly included blood and urine sample data and psychiatric reports, raising counterintelligence fears. The FBI has not publicly confirmed the breach. ShinyHunters called the attack a nonfinancial challenge to FBI allegations it considers false and promised not to publish the stolen data.
Positives
- Dutch authorities arrested the alleged ShinyHunters leader on September 15 and secured at least 90 days of custody.
- The Dutch High Tech Crime Unit moved quickly to protect victims and preserve evidence, according to Brett Leathermann.
- Seized devices supplied evidence supporting a separate investigation into two planned murders abroad.
- ShinyHunters promised not to publish the sensitive FBI data it claims to have stolen.
Risks & concerns
- ShinyHunters is linked by authorities to breaches of more than 140 organizations, including Pornhub, Ticketmaster and AT&T.
- Laptop evidence allegedly described two murders to be committed abroad, creating a separate attempted orchestration case.
- The claimed FBI breach exposed names, addresses, job titles and Social Security numbers for almost all agents and applicants.
- A roughly 5,000-agent sample reportedly contained blood, urine and psychiatric data, posing a major counterintelligence risk.
- ShinyHunters denies Pepijn van der Stap is a member, while the FBI has not publicly confirmed the breach.