Sunday 4 October 2026
Afternoon EditionRSS
ZOTPAPER

News without the noise

ZOTPAPER
Security

ShinyHunters Suspect Detained in Jordan, Cooperating with FBI

Saif al-Din Khader, known online as 'Rey', taken into custody as law enforcement closes in on hacking group

By LineZotpaper
Published
Read Time2 min
A suspected member of the ShinyHunters hacking group has been detained in Jordan and is cooperating with the FBI to help identify and locate other members, according to sources who spoke to Reuters. The suspect, identified as Saif al-Din Khader and known by the online alias 'Rey', was taken into custody on Tuesday.

Khader is reportedly assisting the FBI and international law enforcement by walking investigators through his electronic devices and digital communications. 'His cooperation is critical to ongoing efforts to arrest these hackers,' a source told Reuters.

The detention comes amid an FBI crackdown on ShinyHunters following the group's claim that it breached FBI systems in September using an alleged zero-day vulnerability in Oracle PeopleSoft. The group said it stole between 2TB and 3TB of data, including information on current and former FBI employees, job applicants, and medical and psychiatric records. The FBI has said it is investigating the claims but has not confirmed data theft.

Earlier in September, Dutch police arrested a 24-year-old man in Amsterdam in connection with the investigation. That suspect was identified as Pepijn van der Stap, who previously used the alias 'Umbreon'. After that arrest, FBI Cyber Division Assistant Director Brett Leatherman warned other group members to surrender. 'The longer you stay in this, the more we learn about you,' Leatherman said. 'I suggest you reach out first while the choice is still yours.'

The main ShinyHunters representative continued communicating with BleepingComputer after van der Stap's arrest, indicating that he was not the person operating that messaging account. On Tuesday, the same day Khader was reportedly detained, signs of disruption began appearing within the group's operation.

§

Analysis

Why This Matters

  • The cooperation of a key suspect could accelerate the dismantling of ShinyHunters by providing leads to other members.
  • The case demonstrates how a high-profile breach can trigger an international law enforcement response that pressures groups from multiple angles.
  • It may encourage other hacking suspects to cooperate in hopes of leniency.

Background

ShinyHunters is an extortion group that has claimed responsibility for numerous data breaches. In September 2026, the group said it hacked FBI systems using an alleged zero-day vulnerability and stole large volumes of data. The FBI acknowledged investigating the claims. Dutch authorities soon arrested a suspect in Amsterdam. The FBI then publicly called on remaining ShinyHunters members to turn themselves in, saying investigators were identifying those involved.

Key Perspectives

FBI: The bureau is aggressively pursuing every individual linked to the breach. Assistant Director Leatherman told members they are being identified and should surrender voluntarily. ShinyHunters: The group's main representative continued to communicate after the Dutch arrest, suggesting that not all members have been captured and the group may still be active. International law enforcement: The arrest in Jordan and the earlier arrest in the Netherlands show a coordinated effort across borders to track down group members.

What to Watch

  • Whether Khader's cooperation leads to further arrests, especially of members who have not yet been identified.
  • Signs of increased disruption or silence from ShinyHunters' communication channels.
  • Any official confirmation from Jordanian or US authorities about the detention and cooperation agreement.

Sources

Zotpaper

Written by software from the reporting listed above, scored by an automated standards desk, and published without a person reading it first. If something here is wrong, tell the editor and it will be put right.

How we workReport an errorSubscribe