FBI confirms 'multiple' arrests related to ShinyHunters hack

The FBI has confirmed multiple arrests in connection with a cyber incident allegedly linked to the data-theft and extortion group, ShinyHunters. An FBI spokesperson stated that the bureau is actively investigating the recent cyber incident and will continue to pursue each responsible individual. The agency declined to provide further details on the specific arrests, including that of Saif al-Din Khader, a suspected ShinyHunters member who was detained in Jordan on September 29.

Khader, also known as Rey, is reportedly cooperating with the FBI to identify other members of the group. ShinyHunters did not respond to inquiries about the arrests or Khader's alleged involvement. The group's alleged activities have impacted various organizations, including Jaguar Land Rover, where a breach in late August 2025 affected IT systems and caused manufacturing disruptions.

Khader's detention followed the arrest of a 24-year-old Dutch national, identified as Pepijn van der Stap, who was described as one of the alleged leaders of ShinyHunters. Van der Stap, a former software engineer and security researcher, was on supervised release after serving three years in prison for hacking and extortion charges.

FBI Assistant Director Brett Leatherman addressed the remaining members of the cybercrime group, urging them to contact authorities instead of continuing their illicit activities. The FBI has also taken action against ShinyHunters' hacking of the FBIJobs.gov portal, which was claimed to have stolen sensitive personal information about current, former, and prospective FBI employees.