Threats · 42m ago

ShinyHunters Arrest Opens a Wider Case

Dutch police arrested a 24-year-old man in Amsterdam on September 15 whom Brian Krebs identified as Pepijn van der Stap, and the FBI said he was an alleged leader of ShinyHunters, the extortion crew blamed for attacks on more than 140 organizations. The arrest also followed the group’s claim to have breached FBI systems earlier this month.

Police said they found a lot of information on his laptop, and U.S. and Dutch officials said the seizure could yield more leads on the rest of the group. That matters because ShinyHunters has built its work around stealing data from cloud and third-party environments and then threatening to publish it, so one arrest can expose infrastructure, names, and methods beyond a single case.

For organizations that rely on SaaS providers, vendors, or other shared services, the exposure is not limited to the detained suspect. If the seized devices and any cooperating witnesses point back to common access paths or reused infrastructure, this arrest could accelerate victim notifications and follow-on arrests across unrelated breaches.

Timeline

Sources

3 sources covering this story

Entities

Part of the PlainSec briefing for 2026-09-29

Editions

Related stories