Dutch Police Arrest Convicted Hacker in ShinyHunters Investigation

Dutch authorities have apprehended a 24-year-old individual suspected of association with the notorious ShinyHunters cybercrime organization. The suspect, an Amsterdam resident, is set to make his appearance before Rotterdam District Court on Tuesday. The police have withheld the suspect's identity, but a company has identified him as an offensive security lead within their ranks. RTL and other news wire services have also published a name, which the Register is withholding until officially confirmed by law enforcement.

The authorities have not disclosed the alleged offenses the suspect is suspected of or any specific cyberattacks he may have been involved in. However, the timing of this arrest has drawn attention to the ongoing investigation into the February breach of Dutch telecommunications company Odido, which was claimed by ShinyHunters and impacted 6.2 million customers. It remains unclear whether the arrested individual was implicated in that attack or if he is the voice heard in a recently released audio recording.

In September, police released a portion of the call in which a Dutch-speaking caller impersonated an IT colleague to obtain internal system access. This led to the receipt of 20 tips from the public, including information the investigation team deemed valuable. The suspect was arrested on September 15, and forensic investigators conducted a visit to an Amsterdam office during the operation, employing flashbang grenades during the raid.

This arrest follows a week-long public appeal, and the individual mentioned in news reports has a prior criminal record, having been convicted for hacking, data theft, and extortion in the past. He initially received a four-year prison sentence, with one year suspended, before transitioning into legitimate cybersecurity work. ShinyHunters has denied any link to the named individual, despite boasting about hacking an FBI recruitment system to "protect our business" in recent days. The group continues to be associated with a series of escalating attacks and extortion attempts.