This is a new development in a story we reported earlier: Dutch Arrest in ShinyHunters Probe Followed by FBI Breach Claim and Cl0p Targeting.
Fox News reported that FBI Director Kash Patel announced on Oct. 9 that field agents arrested another suspected ShinyHunters co‑conspirator tied to the FBIjobs.gov breach.
According to Fox News, Patel said the arrest ties to the FBIjobs.gov breach, which happened on a platform run by a third‑party vendor. According to Nextgov.com, this is the third law‑enforcement action targeting ShinyHunters members after authorities disclosed the breach in September.
According to BleepingComputer, On September 15, Dutch police took into custody Pepijn van der Stap, a 24‑year‑old from Amsterdam who goes by Umbreon online, as part of the ShinyHunters probe. According to Nextgov.com, On Sept. 29, the FBI said Dutch authorities had detained an alleged ShinyHunters leader.
According to The News International, Jordanian authorities detained a suspected ShinyHunters member identified as Saif‑al‑Din Khadar (also spelled Saif al‑Din Khader). The suspect is working with the FBI and international law enforcement, according to Jordanian authorities.
According to Fox News, Patel said the data taken from the breach holds agents’ names, home addresses, and Social Security numbers, job assignments, and sometimes the names of family members. According to Nextgov.com, a sample shared with media outlets contained about 5,000 records listing names, home addresses, phone numbers and relatives’ details, and it flagged employees in intelligence and surveillance positions.
According to BleepingComputer, ShinyHunters told BleepingComputer it entered FBI networks by exploiting an alleged Oracle PeopleSoft zero‑day flaw (an unknown vulnerability), then moved sideways into the bureau’s AWS GovCloud environment (a government‑only cloud platform). The group said it took between 2TB and 3TB of data, covering current and former FBI staff, jobseekers, medical and psychiatric files, and internal service records. Confirmed data samples showed the breach revealed home addresses, Social Security numbers, and job assignments deemed sensitive, along with details about employees’ relatives and other personal information. Patel said the FBI will keep working with partners to dismantle the remaining ShinyHunters network and its associates around the world.
Join the discussion