Story perspectives

Police arrest suspect in ShinyHunters Odido data theft

By Drooid · Sep 29, 2026, 11:00 PM UTC · How we work

Summary

ShinyHunters Leak Records

Authorities arrested a suspect after publishing an audio clip of the Dutch-speaking caller who duped an Odido employee.
The attack stole data of over 6 million Odido customers by directing staff to a fake login site.
ShinyHunters demanded ransom; Odido refused, so the group posted the stolen records on the dark web.
Police’s public appeal after releasing the call yielded 20 tips, aiding the ongoing investigation.

Summary

Dutch Police Arrested

Dutch police arrested 24-year-old Pepijn van der Stap in Amsterdam earlier this month.
Investigators said laptop data alleged van der Stap ordered two murders abroad, though they could not confirm the killings.
ShinyHunters denied any link to van der Stap while Neo Security named him its offensive security lead.
He is scheduled to appear before a Rotterdam court on Tuesday.

Summary

ShinyHunters Demand Advisory Withdrawal

ShinyHunters said the FBI breach retaliated against a May advisory they called “offensive”.
The hackers demanded the FBI withdraw the advisory within a week, threatening data release.
They claimed the attack used a previously unknown Oracle PeopleSoft vulnerability, not financial extortion.
ShinyHunters said they would keep the stolen FBI data private for political reasons.
The group warned the exposed personnel records could aid foreign intelligence services.

History

Historical Context

On 27 April 2007 Estonia faced massive DDoS attacks on banks, media and government sites after a dispute over the Bronze Soldier, an event widely traced to Russian IP addresses. The assault spurred NATO to establish the Cooperative Cyber Defence Centre of Excellence in Tallinn in May 2008, shaping today’s EU-wide cyber-response efforts.

1 of 4

ShinyHunters Leak Records

Authorities arrested a suspect after publishing an audio clip of the Dutch-speaking caller who duped an Odido employee.
The attack stole data of over 6 million Odido customers by directing staff to a fake login site.
ShinyHunters demanded ransom; Odido refused, so the group posted the stolen records on the dark web.
Police’s public appeal after releasing the call yielded 20 tips, aiding the ongoing investigation.

1 / 4