Sunday 4 October 2026
Afternoon EditionRSS
ZOTPAPER

News without the noise

ZOTPAPER
Security

FBI warns ShinyHunters members to surrender after alleged leader arrested in Amsterdam

Dutch police find evidence of murder-for-hire plots on suspect’s laptop

By LineZotpaper
Published
Updated
Read Time2 min
Sources2 outlets
The FBI has publicly called on members of the ShinyHunters cyber extortion group to turn themselves in, following the arrest of an alleged leader by Dutch police who uncovered evidence on his laptop that he ordered two murders abroad.

FBI Cyber Division Assistant Director Brett Leatherman issued a video statement Tuesday warning members of ShinyHunters to surrender, hours after Dutch authorities announced the arrest of a 24-year-old Amsterdam man they say played a leadership role in the hacking group.

“Today, our partners at the Dutch National Police announced the arrest of one of the alleged leaders of ShinyHunters, a group linked to cyberattacks in the United States, the Netherlands, and around the world,” Leatherman said.

Dutch police said the suspect was arrested on September 15 and is suspected of being part of a criminal organization. After his arrest, investigators found a large amount of information on his laptop, including details about two murders that were to be committed abroad. “There are indications that the suspect gave the order for this,” the police said.

The Rotterdam District Court ruled Tuesday that the suspect will remain in pre-trial detention for at least another 90 days. Police said further arrests have not been ruled out.

The FBI says ShinyHunters and its alleged co-conspirators have breached more than 140 organizations since last year and collected at least $70 million in extortion payments. The group frequently targets corporate single sign-on accounts, third-party vendors, and cloud-based SaaS platforms such as Salesforce and Snowflake to steal sensitive data before extorting victims.

The warning comes shortly after ShinyHunters claimed responsibility for a data breach at the FBI itself, telling BleepingComputer that the breach involved exploitation of an Oracle PeopleSoft zero-day. The group claimed to have stolen two to three terabytes of data, including information connected to multiple internal services, and later provided a sample of about 5,000 FBI personnel records to media organizations. 404 Media reported that the stolen information included data belonging to members of the FBI’s Remote Operations Unit.

§

Analysis

Why This Matters

  • The FBI’s public call for hackers to surrender signals an unprecedented escalation in law enforcement’s pursuit of cyber extortion groups, which have caused billions in damages globally.
  • Evidence of alleged murder-for-hire plots tied to a cybercrime group raises the stakes far beyond financial crime, suggesting a dangerous crossover between digital extortion and physical violence.
  • The breach of the FBI itself by the same group undermines the bureau’s credibility and exposes sensitive personnel data, potentially compromising ongoing operations.

Background

ShinyHunters emerged as a prominent cyber extortion group known for targeting large corporations and government agencies. Their typical method involves breaking into cloud-based platforms like Salesforce and Snowflake via compromised accounts, stealing sensitive data, and demanding payment to prevent its publication. The group has claimed responsibility for multiple high-profile breaches. The recent arrest in the Netherlands marks the first known capture of a senior figure in the group.

Key Perspectives

FBI and Law Enforcement: The FBI views the arrest as a major breakthrough and is using it to pressure remaining members to surrender, believing it can dismantle the group through cooperation. Dutch police emphasize the seriousness of the murder-for-hire evidence, treating it as a separate criminal investigation. ShinyHunters Members: Remaining members likely see the arrest as a warning and may either escalate operations to prove their resilience or go underground, making themselves harder to track. Critics/Skeptics: Some may question the FBI’s narrative, given the group’s recent claim of hacking the bureau itself. Critics could argue the FBI’s warning is partly a face-saving move after a damaging breach.

What to Watch

  • Whether further arrests occur as Dutch police continue their investigation and share intelligence with international partners.
  • The outcome of the murder-for-hire allegations, which could lead to additional charges and extradition requests.
  • How ShinyHunters responds operationally: whether they attempt new high-profile breaches to demonstrate they remain active, or whether the group fragments.

Sources

Zotpaper

Written by software from the reporting listed above, scored by an automated standards desk, and published without a person reading it first. If something here is wrong, tell the editor and it will be put right.

How we workReport an errorSubscribe