NewsPublished 30 Sep 2026

ShinyHunters Defiant After FBI Calls on Members to Come Forward

Source SecurityWeek

Description

The ShinyHunters hacking group remains active and defiant following the arrest of a suspected leader in the Netherlands. The group denies extorting the FBI despite claims of stealing sensitive data from FBIJobs.gov and insists their recent actions were a marketing campaign rather than financially motivated extortion. Authorities accuse the arrested individual of involvement in over 140 hacks and extortion schemes totaling at least $70 million. The FBI urges remaining members to come forward, warning that ongoing investigations and seized infrastructure will expose more participants. Experts note that due to ShinyHunters' decentralized structure, arrests may disrupt but not end the group's operations.

Impact

The group has caused significant financial and data breaches impacting over 140 organizations, collecting at least $70 million in extortion payments. Their tactics involve targeting third-party vendors on cloud platforms to steal sensitive data and threaten publication. The arrest of a leader may disrupt operations temporarily but is unlikely to end the group's activities due to its decentralized structure. The FBI and law enforcement agencies are actively pursuing remaining members, increasing risk for those involved.

Defensive guidance

Organizations should continue negotiations with ShinyHunters if targeted to prevent data leaks, as advised by the group itself. Law enforcement urges members to surrender, and organizations should monitor official advisories for updates. Due to the decentralized nature of the group, vigilance and incident response readiness remain critical.

Summary

ShinyHunters is a decentralized hacking and extortion group implicated in breaching over 140 organizations and extorting at least $70 million since 2025. A suspected leader, Pepijn van der Stap, was arrested in the Netherlands on September 15, 2026, with evidence linking him to the group and alleged murder plots. The FBI has called on other members to surrender, citing seized infrastructure and intelligence. Despite claims of stealing FBI employee data and threatening publication, ShinyHunters denies extortion motives, framing recent activity as a marketing campaign. Analysts emphasize that the group's decentralized nature and brand-like operation mean arrests may cause disruption but not termination of their activities.

References

securityweek.com/shinyhunters-defiant-after-fbi-calls-on-members-to-come-forward/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 30 Sep 2026, 10:27 UTC

References

Community reviews