Dutch police have arrested a 24-year-old Amsterdam man on suspicion of being a member of the ShinyHunters hacking group, which recently claimed responsibility for breaching the FBI’s jobs website. The suspect was detained on September 15 and faces charges unrelated to the FBI hack, including attempted incitement to commit two murders, according to Dutch authorities.
The arrest follows the hacker group’s September 21 claim of stealing sensitive data from the FBI’s jobs portal, including personal details of approximately 38,000 agents and applicants. The FBI has confirmed an ongoing investigation into the cyber incident and stated it is working with international partners, including Dutch authorities, to address the breach.
Core Developments
- September 15: Dutch police arrested the suspect in Amsterdam on charges of attempted murder solicitation and alleged involvement in ShinyHunters.
- September 21: ShinyHunters claimed to have breached the FBI’s jobs website, alleging theft of sensitive personnel data.
- September 24: A Dutch court ordered the suspect held for 90 days pending further investigation, as authorities continue to analyze seized devices.
Hacking Group’s Claims and FBI Response
ShinyHunters asserted in communications with media outlets and dark web posts that it exploited a vulnerability in Oracle PeopleSoft, a human resources management system, to access FBI data. The group claimed possession of two to three terabytes of data, including names, roles, badge numbers, home addresses, and phone numbers of FBI personnel and job applicants.
The FBI has not confirmed the extent of the breach but acknowledged in internal communications that a cybersecurity incident occurred, with some employee data compromised. FBI Director Kash Patel publicly thanked Dutch authorities and stated that FBI teams are actively pursuing leads in collaboration with international partners. Assistant Director Brett Leatherman of the FBI’s Cyber Division issued a public statement urging members of ShinyHunters to surrender, warning that anonymity offers no protection.
Legal and Investigative Proceedings
Dutch police confirmed the suspect’s arrest was not directly tied to the FBI breach investigation but stemmed from unrelated charges discovered during a search of his devices. Authorities seized multiple data carriers, including a laptop containing information about the alleged murder plots. The court’s decision to hold the suspect for 90 days reflects the severity of the charges and the ongoing nature of the investigation.
Investigators have not ruled out additional arrests, as the case expands to examine the suspect’s broader activities and potential connections within ShinyHunters. The FBI has emphasized the collaborative nature of the investigation, with Dutch High-Tech Crime Unit and other international partners assisting in the probe.
Background on ShinyHunters
ShinyHunters is a notorious cybercrime syndicate linked to multiple high-profile data breaches in the United States, the Netherlands, and globally. The group has previously claimed responsibility for breaches affecting major corporations and government entities, often demanding ransom or leaking stolen data. Dutch cybercrime investigators described ShinyHunters as responsible for a large number of national and international victims, underscoring the group’s alleged widespread impact.
Ongoing Impact and Next Steps
The FBI has stated it is communicating with potentially affected individuals and conducting a Bureau-wide review in response to the incident. While the full scope of the breach remains under investigation, the arrest marks a significant step in addressing the activities of ShinyHunters and related cyber threats. Authorities continue to analyze the seized evidence to determine the suspect’s role within the hacking group and any additional criminal activities.