FBI Arrests Canadian Cybersecurity Executive in ShinyHunters Investigation
Summary
The FBI arrested a Canadian cybersecurity executive in Pennsylvania on cyber extortion and conspiracy charges tied to its ShinyHunters investigation. The charges are based on court records, some of which are sealed.
Key points
- The arrest occurred in Pennsylvania on October 8; court records name Edward Dobrovsky, while the article identifies the executive as Edward Dubrovsky.
- The charges include conspiracy to threaten information confidentiality to extort money and interference with commerce by threats.
- The FBI declined to comment, and the suspect had not yet been appointed a public defender, according to the article.
- ShinyHunters commonly uses phishing and stolen credentials to steal data from corporate SaaS accounts and threaten to publish it unless paid.
- The FBI says ShinyHunters has extorted more than $70 million from victims this year.
- Sources say investigators are reviewing devices seized in a Dutch arrest and that further charges involving ransomware-negotiation firms may follow.
Article Details
- Event Type
- FBI arrest connected to an investigation into the ShinyHunters hacking group and alleged cyber extortion
- Impact
- The arrested Canadian executive faces cyber extortion and conspiracy charges, according to court records; the core complaint and several other records are sealed. The article reports that ShinyHunters stole sensitive data concerning thousands of FBI agents, including medical and psychiatric records. The FBI says the group has extorted more than $70 million from victims this year.
MITRE ATT&CK
People
Edward DubrovskyCanadian cybersecurity-firm executive arrested in Pennsylvania on cyber extortion and conspiracy charges, according to court records. The article reports a Cypfer spokesperson disputed his LinkedIn profile's claim that he was a founder or co-founder.Pepijn van der StapConvicted cybercriminal arrested by Dutch police in connection with the ShinyHunters investigation, according to the article.Saif al-Din KhaderIdentified by Reuters, as reported in the article, as the teenager known as Rey; the article says he was detained and was cooperating with FBI investigators.
Threat Actors
Pepijn van der StapConvicted cybercriminal arrested in connection with the ShinyHunters investigation; sources cited by the article say the FBI examined devices seized during his arrest.ReyNamed ShinyHunters member who the article says assumed control of the group after Pepijn van der Stap's arrest and taunted the FBI. Reuters identified Rey as Saif Al-din Khader.Saif Al-din KhaderIdentified by Reuters, as reported in the article, as the person known as Rey, a ShinyHunters member.ShinyHuntersHacking group under FBI investigation; the article says it uses phishing and stolen credentials to steal corporate data and threaten publication unless ransom demands are paid.
Vendors
CyberStewardAccording to LinkedIn, one of Cypfer’s “ex-founders” was Edward Dubrovsky, who is now associated with another Canadian security firm and sponsor called CyberSteward.CYPFERThe conference had several sponsors, but according to the summit’s website its biggest sponsor was a Canadian security company called Cypfer.
Industries
AviationOn October 7, we detailed how Rey was apprehended as the cybercrime group allegedly sought to extort a navigation and digital aviation unit that was divested by Boeing in late 2025.Software-as-a-serviceShinyHunters typically uses phishing and stolen credentials to siphon data from corporate accounts at software-as-a-service companies, and then threatens to publish the stolen data online unless a ransom demand is paid.