Science & Tech · Cybersecurity · 2 days ago
FBI arrests another suspect linked to ShinyHunters jobs-site breach
The FBI has arrested another person suspected of being connected to ShinyHunters, a cybercrime group.
FBI Director Kash Patel announced the arrest on October 9 but did not identify the suspect or say where the arrest happened.
CBS News and other outlets reported, citing unnamed sources, that the suspect is a Canadian citizen arrested in Pennsylvania and is believed to have been directly involved in the hack.
ShinyHunters claimed it stole data through FBIJobs.gov, the bureau’s jobs website, in September.
The FBI says the breach came through a platform managed by an outside contractor, which failed to install a security update.
Data samples reportedly included personal information about FBI employees and job applicants, though the full extent of the breach has not been independently confirmed.
The arrest follows earlier detentions in the Netherlands and Jordan as investigators pursue people linked to the group.
Patel said the FBI is continuing to investigate and work with partners; authorities have not publicly named the new suspect or announced charges.
The FBI arrested another person suspected of being connected to the ShinyHunters cybercrime group, Director Kash Patel said on Friday.
The suspect was reportedly arrested in Pennsylvania and is a Canadian citizen, but authorities have not publicly identified the person or announced specific charges.
The arrest is part of a series of law enforcement actions following the September breach of the FBI's jobs website, FBIJobs.gov.
ShinyHunters claimed it stole between 2 and 3 terabytes of data related to FBI workers; reports said the exposed information included sensitive personal and work records.
The FBI said a contractor-managed system was not updated with a security patch, while the group has said it exploited a vulnerability in Oracle PeopleSoft.
- Who
- The FBI arrested an unidentified Canadian citizen suspected of involvement with ShinyHunters.
- What
- An arrest connected to the breach of the FBI's jobs website.
- When
- Earlier this week; announced October 9, 2026.
- Where
- Pennsylvania, according to reports cited by the outlets.
- Why
- The suspect is believed to be connected to the ShinyHunters breach and theft of data from the FBI's jobs website.
This story does not have two clearly opposing sides.
This is the latest arrest this FBI has made in a matter of days involving this network, as we work non-stop to dismantle the group, pursue new leads and evidence, and act quickly.
The FBI has removed the contractor and taken all necessary steps to both mitigate any further risk and protect our workforce.
We will not remain active on Telegram for much longer, as several of our members have reportedly been arrested by the FBI
Dutch police arrested Pepijn van der Stap, a 24-year-old suspected ShinyHunters member.
The FBI jobs-site intrusion was first reported, according to CBS News.
Jordanian authorities detained Saif al-Din Khader, known online as Rey, according to reports cited by The Record.
The FBI arrested another person suspected of being connected to ShinyHunters, reportedly in Pennsylvania.
FBI Director Kash Patel announced the latest arrest.
- Suspect
- Unidentified Canadian citizen
- Reported arrest location
- Pennsylvania
- Affected website
- FBIJobs.gov
- Data volume claimed by ShinyHunters
- 2 to 3 terabytes
- FBI jobs-site intrusion first reported
- September 22, 2026
Sources
Kash Patel announces arrest of suspected ShinyHunters co-conspirator after FBI jobs portal breach
FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack
FBI arrests another suspected ShinyHunters hacker after agency breach
FBI arrests suspected member of ShinyHunters in connection with jobs site hack
FBI touts another ShinyHunters arrest in response to data breach
Related news
Canadian cybersecurity negotiator arrested in ShinyHunters investigation
US seizes two China-linked hacking tools used against critical infrastructure
Anthropic offers free AI vulnerability scans to open-source projects
Illinois college says Flock refused to remove its cameras before contract ended
Canadian cybersecurity executive arrested on extortion-related charges
Security Affairs launches weekly AI and cybersecurity newsletter
AI-assisted attacks hit South Korean financial institutions
Ricardo data breach affects about 890,000 user accounts
Account linked to Chinese DDoS group in probe of attacks on South Korean finance
Thousands of GPU servers exposed monitoring data, with hundreds vulnerable to crashes
AI agents push identity security to the forefront for companies
