Story perspectives

Dutch Police Arrest Alleged ShinyHunters Suspect Pepijn van der Stap

By Drooid · Sep 29, 2026, 6:17 AM UTC · How we work

Summary

Dutch Police Arrested

Dutch police arrested 24-year-old Pepijn van der Stap for alleged involvement with ShinyHunters.
Pepijn van der Stap will appear in Rotterdam court on Tuesday.
Benjamin Korper identified van der Stap as a ShinyHunters suspect.
A ShinyHunters spokesperson said van der Stap is not linked to the group and called police incompetent.
Investigators found no evidence that van der Stap hacked Neo Security or its clients.

Summary

ShinyHunters Breach Odido

ShinyHunters exploited PeopleSoft CVE-2026-35273 zero-day to steal data from dozens of organizations.
Mandiant researcher Austin Larsen said the group is on track for nearly $100 million in extortion payments in 2026.
The FBI confirmed ShinyHunters accessed its job portal, extracting psychiatric and medical records of more than 5,000 staff.
In February 2026 ShinyHunters breached Odido, compromising personal data of over 6.2 million Dutch citizens.

1 of 2

Dutch Police Arrested

Dutch police arrested 24-year-old Pepijn van der Stap for alleged involvement with ShinyHunters.
Pepijn van der Stap will appear in Rotterdam court on Tuesday.
Benjamin Korper identified van der Stap as a ShinyHunters suspect.
A ShinyHunters spokesperson said van der Stap is not linked to the group and called police incompetent.
Investigators found no evidence that van der Stap hacked Neo Security or its clients.

1 / 2