FBI confirms 'multiple' arrests related to ShinyHunters hack

The FBI confirmed the arrest of "multiple" suspects in connection with a cyber attack allegedly perpetrated by the data-theft-and-extortion group known as ShinyHunters, according to a statement to The Register. An FBI spokesperson emphasized the agency's unwavering commitment to "bringing each of the responsible individuals to justice" and assured that they would "spare no resource in this regard."

However, the bureau did not provide further details on the specific arrests, including the detention of Saif al-Din Khader, a suspected member of ShinyHunters who was reportedly apprehended in Jordan on September 29. Khader, who goes by the alias Rey, is said to be cooperating with the FBI to identify other members of the group.

ShinyHunters declined to comment on the arrest and Khader's alleged involvement with the criminal organization. The arrest follows a series of high-profile breaches linked to ShinyHunters, including the JLR carmaker's IT system breach in late August 2025, which crippled manufacturing operations and resulted in the theft of payroll data for thousands of JLR employees.

The group also targeted the FBIJobs.gov portal, claiming to have stolen sensitive personal details of current, former, and prospective FBI employees, a claim the FBI dismissed as not being financially motivated and instead stating it was a "public relations and marketing initiative."