Full Breakdown
FBI, Dutch Police Arrest Alleged ShinyHunters Leader Amid Claims of FBI Jobs Portal Breach
By Drooid · · How we work
Core Event: Arrest and Alleged Hack
Dutch authorities detained a 24-year-old Amsterdam resident on September 15 under Dutch law, identifying him as an alleged leader of the international cyber-extortion group ShinyHunters. The suspect, named by Neo Security as Pepijn van der Stap, was arrested with the assistance of FBI investigators. Within days, ShinyHunters announced that it had breached the FBI’s recruitment website, FBIJobs.gov, claiming to have stolen “very sensitive data” belonging to thousands of agents and applicants. The group set a deadline for the bureau to retract a prior public service announcement, but later issued a statement saying it would not publish the stolen material.
Background & Context
ShinyHunters is known for hacking corporations, stealing data, and demanding payment to prevent public release. The group has previously targeted companies such as Ticketmaster, Pornhub, and Dutch telecom provider Odido. Van der Stap had been convicted in 2023 for hacking, data theft, and extortion, later returning to legitimate security work before the current allegations. The arrest follows a broader law-enforcement effort to disrupt transnational cybercrime networks.
Data & Statistics
- The group’s sample document included Social Security numbers, dates of birth, phone numbers, home addresses, emergency contacts, and relatives’ details.
- ShinyHunters claimed to have exfiltrated between two and three terabytes of material from the FBI portal, a figure that remains unverified.
- A Rotterdam court ordered the suspect to remain in pre-trial detention for 90 days.
Official Statements & Responses
- An FBI spokesperson said the bureau is “working around the clock” to investigate the incident, has communicated with potentially impacted employees, and treats the security of its information and workforce as a top priority.
- The FBI warned employees to remain vigilant and report unsolicited contacts after learning of the breach through media reports.
Conflicting Reports & Gaps
- ShinyHunters’ claim of stealing terabytes of data has not been independently verified; the FBI has not confirmed the volume or full content of the alleged exfiltration.
- While the group provided a sample document confirming authenticity of a former agent’s information, it did not supply evidence for its broader claim of compromising multiple agency programs.
- Van der Stap’s alleged leadership role is disputed by ShinyHunters, which denied any association with him.
- The investigation into the suspect’s alleged solicitation of two murders abroad is stated to be unrelated to the ShinyHunters case, and no charges have been filed on that front.
Verbatim Quotes
- “To the remaining members of ShinyHunters: You’ve heard about the arrest of your colleague,” — Brett Leatherman, division assistant director
- “Arresting cybercrime suspects is a key intervention in our broad-based fight against this type of crime,” — Stan Duijf, the Dutch police official responsible for tackling cybercrime
What’s Next
Dutch investigators are analyzing seized storage devices and tracing potential collaborators. The FBI continues its “ongoing” investigation into unauthorized activity affecting FBIJobs.gov, with the point of initial compromise still undetermined. Authorities have indicated that additional arrests remain possible as the joint operation proceeds.