Have I Been Pwned has verified that a November 2025 breach of Harvard's Alumni Affairs and Development systems exposed data tied to more than 850,500 unique email addresses. The leaked records include names, emails, phone numbers, addresses, dates of birth and social media profiles, though Harvard says no Social Security numbers, passwords or payment data were stored on the affected systems. The ShinyHunters extortion gang claimed responsibility and published a 1.1GB archive online after Harvard declined to pay a ransom.
bleepingcomputer.com
· 2026-11-03
Federal investigators tracking the ShinyHunters hacking group have identified executives at two ransomware negotiation firms who had unusually close contact with the gang, according to sources cited by KrebsOnSecurity. One U.S.-based executive is suspected of helping the group operate a website used to pressure victims into paying ransoms. The probe follows ShinyHunters' breach of the FBI's recruitment site and the arrest of alleged member Pepijn van der Stap in the Netherlands.
krebsonsecurity.com
· 2026-10-19
The FBI has arrested a Canadian cybersecurity professional in connection with the ShinyHunters hacking operation, which has been linked to large-scale data breaches at multiple companies. Authorities allege the suspect played a role in the group's activities, though full charging details have not been outlined.
yro.slashdot.org
· 2026-10-13
Edward Dubrovsky, a 54-year-old Canadian cybersecurity executive, was arrested in Pennsylvania while attending a cybersecurity conference and later transferred to the Eastern District of Texas, where sealed charges of conspiracy and extortion have been filed against him. Dubrovsky has held senior roles at CYPFER and CyberSteward, firms that help ransomware and data-breach victims negotiate with cybercriminals, and multiple news outlets report his arrest is tied to the FBI's investigation into the ShinyHunters hacking group.
bleepingcomputer.com
· 2026-10-10
FBI agents arrested Edward Dubrovsky, co-founder of Canadian ransomware-negotiation firm Cypfer and now with CyberSteward, in Pennsylvania on cyber extortion and conspiracy charges, according to sources speaking to KrebsOnSecurity. The arrest ties into an investigation of the ShinyHunters hacking group, which recently stole sensitive FBI data on thousands of agents; Dubrovsky was reportedly attending a cyber insurance conference in Philadelphia at the time.
krebsonsecurity.com
· 2026-10-10
Jordanian authorities detained a suspected member of the ShinyHunters hacking group this month, following the gang's unverified claim that it stole data on nearly all FBI employees and applicants via a third-party jobs portal, which it also defaced. The suspect is reportedly cooperating with investigators, and the arrest follows a Dutch-FBI operation last month that netted another alleged member of the group.
darkreading.com
· 2026-10-09
FBI Director Kash Patel announced the arrest of another suspected ShinyHunters co-conspirator linked to the breach of the FBIjobs.gov platform. The New York Times identified the suspect as a Canadian citizen arrested in Pennsylvania, described as a primary participant in the intrusion, though the FBI has not released his name or charges. This marks the second arrest in days connected to the group behind the hack.
bleepingcomputer.com
· 2026-10-09
A Jordanian teenager known as 'Rey,' identified by KrebsOnSecurity as Saif Al-din Khader, was detained and is reportedly cooperating with the FBI to identify other members of the ShinyHunters hacking group. The detention occurred while ShinyHunters was extorting a business unit recently spun off from Boeing, and came weeks after Rey took over the group's operations following the arrest of another member in the Netherlands, boasting about breaching an FBI site and extorting the ransomware group Cl0p via an Oracle PeopleSoft vulnerability.
krebsonsecurity.com
· 2026-10-07
Reuters reports that Saif al-Din Khader, a teenager suspected of leading the ShinyHunters hacking group, is being detained in Jordan. The group claimed in September it had breached the FBI's job recruitment portal, stealing personal and medical data on roughly 5,000 employees and defacing the agency's logo. Sources told Reuters Khader is cooperating with FBI and international investigators to help identify other members of the group.
yro.slashdot.org
· 2026-10-05
Jordanian authorities reportedly detained Saif al-Din Khader, known online as "Rey" and suspected of belonging to the ShinyHunters hacking group, this week according to Reuters sources. Khader is said to be cooperating with the FBI and international law enforcement, helping investigators go through his devices and communications to identify other alleged members of the group.
bleepingcomputer.com
· 2026-10-03
The Department of Defense is notifying over 2 million current and former service members that hackers accessed personnel data through the Defense Manpower Data Center starting last October. The stolen records included Social Security numbers, names, addresses, sex, race and occupational specialty, affecting 2.8 million living individuals. This follows a separate breach last month in which the ransomware group ShinyHunters claimed to have stolen FBI employee records.
arstechnica.com
· 2026-10-01
Dutch authorities arrested Pepijn van der Stap, a Dutch man previously convicted of data theft and extortion in 2023, who reportedly joined cybersecurity firm Neo Security after his release last year. Krebs on Security and Reuters identify him as the suspect, though neither Dutch police nor the FBI officially named him, and ShinyHunters denies he has any association with the group. Dutch police say he is also suspected of incitement to commit two murders, while FBI officials describe him as one of the group's alleged leaders.
theverge.com
· 2026-09-29
GoKawiil