Just weeks after a notorious overseas hacking collective, ShinyHunters, publicly boasted of stealing a staggering two to three terabytes of sensitive FBI data, their self-congratulatory forecast has turned decidedly dark. The long arm of American justice, working with international partners, has reportedly nabbed one of the alleged ringleaders of the operation in Europe.
The Bureau and Dutch law enforcement delivered the news this week: A 24-year-old Amsterdam man was arrested on September 15 for his suspected role in the ShinyHunters group, also facing grave allegations of attempting to incite two murders. Authorities have not ruled out further arrests as they sift through seized electronic devices, indicating a broader crackdown is underway.
The FBI's Cyber Division wasted no time in confirming the significant bust on social media, making it clear that accountability is coming for those who target America's national security infrastructure.
This morning this FBI and our partners the Dutch National Police are announcing the arrest of one of the alleged leaders of ShinyHunters - a global cybercrime and threat actor group linked to cyberattacks in the United States, the Netherlands, and around the world.
In coordination with FBI investigators the Dutch High-Tech Crime Unit arrested the suspect under Dutch law. As we speak FBI teams are actively working with partners to obtain and execute more leads in the ongoing investigation based on this arrest.
The #FBI thanks our Dutch partners and the industry partners who shared critical information and helped advance this investigation. @FBICyberDiv
Brett Leatherman, assistant director of the FBI's Cyber Division, issued a stark warning to the remaining ShinyHunters members, reminding them that the days of anonymous cyber-criminality are numbered. "We know how to find you," Leatherman declared, a message that ought to echo through every dark corner of the internet where these digital miscreants lurk.
To the remaining members of ShinyHunters: You've heard about the arrest of your colleague. We're confident you've seen or heard things in recent days that the public has not.
Other groups believed anonymity or their friends would protect them, and they were wrong. Arrests have a way of changing who is willing to talk. And seized infrastructure has a way of showing us who's left.
The longer you stay in this, the more we learn about you. You know how to find us and we know how find you. I suggest you reach out first while the choice is still yours.
The breach allegedly compromised a trove of sensitive information, including names, home addresses, phone numbers, dates of birth, and spousal details for as many as 60,000 current and former FBI personnel. Most alarming, private medical records of agents and information tied to highly sensitive cases—involving Chinese spies, Russian intelligence, and drug cartels—were reportedly stolen. Such a brazen attack demanded an immediate and forceful response, which is precisely what the FBI delivered.
While law enforcement has not officially confirmed the suspect's identity, Dutch security firm Neo has named the arrested operative as Pepijn van der Stap, known online as "Umbreon." If accurate, this isn't his first dance with the law; van der Stap, described as Neo's offensive security lead, previously served time and claimed to be "reformed" after leaving prison in 2025.
Dutch police arrested 23-year-old Pepijn van der Stap, known online as “Umbreon,” over suspected links to ShinyHunters activity.
The previously convicted hacker had publicly described himself as reformed after leaving prison in 2025. Authorities are investigating his possible connection to recent data theft and extortion campaigns, including the breach of Dutch telecom provider Odido.
The exact motives behind the alleged attempts to incite murder remain murky. However, for Pepijn van der Stap, it appears his "reformation" was short-lived, and he'll now have ample opportunity to reflect on the consequences of targeting America's law enforcement in a cell—a harsh but necessary reminder that those who sow chaos will ultimately reap justice.
