FBI Reportedly Arrests Another ShinyHunters Suspect in Breach

On October 9, FBI Director Kash Patel announced on X that agents arrested another suspected ShinyHunters co-conspirator, the third public arrest since late September. Dutch police detained Pepijn van der Stap, 24, alias Umbreon, in Amsterdam on September 15. Jordanian authorities arrested Saif al-Din Khader, 16, aliases Rey and ReyXB, around September 29; he is reportedly cooperating with the FBI. Patel said the FBI will disrupt what is left of the group no matter where they operate. The New York Times and CBS News, citing unnamed sources, report the newest suspect is a Canadian citizen arrested in Pennsylvania. The FBI has not confirmed those details. ShinyHunters claimed 2-3 terabytes of data on FBI agents, employees, and applicants, including psychiatric and medical information, Social Security numbers, and home addresses. The breach moved from Oracle PeopleSoft into the FBI's AWS GovCloud after a contractor failed to implement a patch explicitly issued to secure the platform, Brett Leatherman said. The FBI removed the contractor. Two sources named Accenture; it said it is proud to support the mission of the FBI and declined contractor questions. The FBI alleges the group breached more than 140 organizations and took at least $70 million in extortion since last year.