The Dutch authorities have apprehended a suspect believed to be associated with the notorious ShinyHunters cybercrime group. The arrest was confirmed by the police earlier this month, marking a significant development in the ongoing investigation into the group’s activities.
Arrest Details and Background
On Monday, Dutch police disclosed the capture of a 24-year-old man from Amsterdam, suspected of being involved with ShinyHunters. The individual in question is thought to be Pepijn van der Stap, who was previously convicted in 2023 for several hacking incidents that included data theft and extortion.
According to investigative journalist Brian Krebs, van der Stap operated under the alias ‘Umbreon’ during his illegal activities. Before his arrest on September 16, he was serving a supervised release, following a three-year stint in prison out of a four-year sentence. At the time of his latest arrest, he was employed as the offensive security lead at Neo Security.
Links to Recent Cyber Attacks
Reports suggest that the latest FBI hack by ShinyHunters may have been orchestrated by van der Stap, as alleged by the group’s current leader, a teenager from Amman, Jordan, known as Ray. This young cybercriminal is also associated with the ScatteredLapsussHunters group.
ShinyHunters was involved in hacking the FBI job portal, exploiting a vulnerability in Oracle PeopleSoft identified as CVE-2026-35273. This exploit, utilized as a zero-day in June, was coupled with the defacement of the site, featuring an enlarged Umbreon Pokémon image.
Ongoing Investigations and Public Involvement
In early September, Dutch authorities sought public assistance to identify a voice from an audio recording linked to a social engineering attack on Odido, a telecommunications provider. This breach led to the exposure of data belonging to 6.2 million individuals.
Although ShinyHunters acknowledged that one of their members made the call, they asserted that the police would struggle to connect it to an actual person. DataBreaches reported that the voice in the recording does not belong to van der Stap.
The suspect, apprehended earlier this month, is scheduled to appear in court today. The Dutch police have pledged to release further information following the court hearing.
Related cases of cybercrime continue to surface, highlighting the global challenge of combating digital threats. Recent legal actions against cybercriminals underscore the importance of international cooperation and robust cybersecurity measures.
