Dutch Police Arrest Suspected Member of Group Claiming FBI Hack

Dutch police have arrested a 24-year-old man in Amsterdam suspected of being a member of the cyber-crime group ShinyHunters. The group claimed last week to have stolen sensitive personal information on approximately 38,000 FBI personnel.

According to the FBI's public service announcement, ShinyHunters is known to target major companies, often stealing millions of customer records. The group has previously claimed responsibility for breaches including Rockstar Games in April and the education platform Canvas in May. The group allegedly found a vulnerability in the Oracle cloud storage system used by the FBI, potentially accessing systems like FBIJOBS, FBI BEAST (used for background checks), FBI MedLink (medical records), and FBI BICS (investigation information).

Dutch police stated the suspect was arrested on September 15, prior to the alleged FBI attack. He is also suspected of attempted incitement to commit two murders abroad, and authorities seized his devices, finding a substantial amount of information. Officials have not ruled out further arrests.

Stan Duijf, who leads Dutch cybercrime investigations, said the ShinyHunters group is responsible for numerous national and international victims. FBI Director Kash Patel thanked Dutch partners for their collaboration, stating that FBI teams are actively pursuing leads based on the arrest. Assistant Director of FBI Cyber, Brett Leatherman, urged members of the group to surrender, warning that prolonged involvement only provides more information for investigators to identify them.

ShinyHunters claimed to have breached FBI servers on September 21 and reportedly contacted reporters the following day with samples of the stolen data. The group stated its motive was not financial, but rather to prompt the FBI to retract an advisory issued in May that characterized ShinyHunters as "threat actors" who often exaggerate claims to solicit payment.