Ransomware Negotiator Charged With Alleged Extortion; Possible ShinyHunters Link Unconfirmed
Summary
US authorities charged ransomware negotiator Edward Dubrovsky with conspiracy to extort money. Public documents do not link him to a specific incident, though reporting suggests he may be a ShinyHunters suspect; the case complaint remains sealed.
Key points
- Dubrovsky was charged under the Computer Fraud and Abuse Act with conspiracy to threaten impairment of information confidentiality to extort money.
- The main complaint is sealed, and publicly available court documents do not identify a specific incident connected to the charge.
- FBI Director Kash Patel announced the arrest of a suspected ShinyHunters co-conspirator without naming the person; reporting suggests Dubrovsky may be the suspect.
- ShinyHunters is known for data-extortion attacks, including a recent breach claim involving a third-party jobs site used by the FBI.
- The article notes two other ransomware negotiators facing legal consequences: Zohar Pinhasi was arraigned on wire-fraud charges, and Angelo Martino was convicted for sharing information with BlackCat.
- An incident-response executive said the cases may increase pressure on negotiation firms to strengthen background checks and face greater scrutiny from insurers.
Article Details
- Event Type
- Edward Dubrovsky was charged with conspiracy to threaten to impair information confidentiality with intent to extort money. Separately, Zohar Pinhasi was arraigned on wire fraud charges, and Angelo Martino was convicted for sharing details with the BlackCat ransomware group in exchange for payment.
- Impact
- The article says these cases may increase pressure on ransomware negotiation firms to strengthen background checks and face greater scrutiny from insurers. The complaint against Dubrovsky remains sealed, and publicly available documents do not tie his arrest to a specific incident.
People
Angelo MartinoRansomware negotiator convicted for sharing details with the BlackCat ransomware group in exchange for payment.Edward DubrovskyRansomware negotiator charged with conspiracy to threaten to impair information confidentiality with intent to extort money; the complaint remains sealed.Jeff WichmanSemperis senior director of breach preparedness and response who commented on possible effects of the cases on the incident response industry.Kash PatelFBI Director who said the bureau arrested another suspected co-conspirator of ShinyHunters.Zohar PinhasiArraigned on wire fraud charges for allegedly defrauding clients of his ransomware remediation company, MonsterCloud.
Threat Actors
BlackCatRansomware group that Angelo Martino was convicted of sharing details with in exchange for payment.ShinyHuntersLoose collective of threat actors known for data extortion attacks; the group is believed to be responsible for the FBIjobs.gov incident and has claimed to steal FBI employee and job-applicant data.
Vendors
CyberStewardconference in Philadelphia with a firm he said he currently works with, cybersecurity advisory firm CyberSteward.CYPFERCanada, Dubrovsky is associated with a number of cybersecurity firms. He previously was an executive at Cypfer, an incident response firm, from 2022 until the end of 2025, and is a member of the advisory board atFileFlexan incident response firm, from 2022 until the end of 2025, and is a member of the advisory board at FileFlex, a zero-trust product vendor. He also recently attended a cybersecurity conference in Philadelphia withMonsterCloudNew York on wire fraud charges for allegedly defrauding clients of his ransomware remediation company, MonsterCloud. Pinhasi was accused of promising clients that he could decrypt ransomware without paying criminals,QnextDark Reading reached out to Cypfer, CyberSteward, and FileFlex parent company Qnext for comment, but none responded by press time.SemperisJeff Wichman, Semperis senior director of breach preparedness and response, tells Dark Reading these incidents may impact the incident response industry to some degree going forward.