Dutch authorities have apprehended a 24-year-old man from Amsterdam in relation to a probe into the cybercriminal organization known as ShinyHunters, a case that has attracted attention from law enforcement in both the Netherlands and the United States.
The suspect was taken into custody by the Netherlands National Police’s High Tech Crime Unit on September 15. Officials claim he is suspected of involvement with ShinyHunters, a cybercrime and extortion collective connected to several significant data breaches.
This arrest was revealed as part of a collaborative investigation between the FBI and Dutch law enforcement targeting ShinyHunters.
FBI Director Kash Patel indicated that the arrested individual is considered one of the leaders of ShinyHunters, which US agencies brand as an international cybercrime syndicate responsible for multiple attacks across the US, the Netherlands, and beyond.
The authorities have not disclosed the suspect’s identity yet.
Suspect remains in custody
A Rotterdam court has mandated that the suspect be held in pretrial detention for a minimum of 90 days as the inquiry progresses.
Dutch police revealed that various data-storage devices were confiscated during the investigation, and authorities are currently scrutinizing the materials without ruling out possible further arrests.
The investigation is part of the Dutch National Police’s High Tech Crime Unit under the authority of the National Public Prosecution Service.
Authorities have not detailed the specific cyberattacks connected to the suspect at this time.
Separate murder allegations under investigation
In addition, Dutch police announced that they are looking into the suspect regarding an alleged scheme to orchestrate two murders abroad.
Authorities indicated that they discovered information linked to the supposed plots on a laptop that was recovered post-arrest.
This line of inquiry is being treated as separate from the ShinyHunters case, according to police.
As both sets of allegations are examined, the suspect remains under specific restrictions.
FBI links ShinyHunters to significant cyberattacks
This arrest coincides with ongoing US investigations into a series of cyber incidents attributed to ShinyHunters.
FBI Cyber Division Assistant Director Brett Leatherman noted that alleged group affiliates have infiltrated more than 140 organizations since last year, reportedly receiving at least $70 million through extortion schemes.
Authorities asserted that ShinyHunters has consistently targeted third-party vendors and cloud services, securing sensitive data and subsequently threatening victims with the exposure of stolen information.
FBI Director Patel mentioned that the agency is collaborating with Dutch investigators and others to pursue new leads following the arrest.
ShinyHunters linked to significant data breaches
ShinyHunters has been associated with various high-profile data breaches impacting organizations across multiple nations.
Dutch police specifically referenced breaches involving companies like Odido, Pornhub, and Ticketmaster while discussing the group’s operations.
The group has garnered recent attention for claiming responsibility for a breach affecting the FBI’s jobs portal.
ShinyHunters asserted it had procured sensitive details regarding FBI personnel and job applicants. The FBI has confirmed it is looking into the reported cyber incident, but the exact impact of the alleged breach has yet to be independently validated.
Suspect’s identity not officially released
Dutch officials have not formally identified the 24-year-old arrested in Amsterdam.
Some media outlets have suggested Pepijn van der Stap as the suspect based on insights from sources familiar with the case and his previous employment, but this has not been confirmed by Dutch police.
Van der Stap reportedly has an existing criminal record for hacking, data theft, and extortion prior to transitioning into the cybersecurity field.
His alleged identity and history have raised significant interest within the cyber community, although the current allegations are still under the jurisdiction of Dutch authorities.
International cybercrime investigation continues
The arrest marks one element of a more extensive international inquiry into ShinyHunters and its reported associates.
Dutch police have stated that investigators are actively reviewing the collected evidence and assembling any information relevant to the group’s activities. Further arrests are still a possibility.
The FBI has declared its investigation is ongoing, with US authorities collaborating with their Dutch counterparts and others.
As the probe advances, officials are expected to determine if the detained suspect was directly linked to specific cyberattacks and assess his purported role within the wider ShinyHunters framework.
The suspect is presumed innocent until declared guilty in a court of of law.