Dutch authorities detained a 24-year-old Amsterdam man as investigators examine his suspected role in the international hacking and extortion group.
THE HAGUE, NETHERLANDS — Dutch police have arrested a 24-year-old Amsterdam man suspected of playing a role in the ShinyHunters cybercrime group, an organization linked by authorities to major data breaches and recently connected to claims of stolen sensitive FBI information.
The suspect was arrested Sept. 15 as part of an investigation by the Dutch National Police’s High Tech Crime Team under the authority of the National Public Prosecutor’s Office. Police announced the arrest Sept. 29, the same day a Rotterdam court ordered that the man remain in pretrial detention for another 90 days. Authorities said investigators seized several data-storage devices and are examining their contents. Additional arrests have not been ruled out.
The FBI described the suspect as one of the alleged leaders of ShinyHunters and said U.S. investigators supported their Dutch counterparts. Brett Leatherman, assistant director of the FBI’s Cyber Division, said Dutch authorities carried out the arrest under Dutch law. The FBI alleges that since last year, ShinyHunters members have breached more than 140 organizations and received at least $70 million in extortion payments. Those allegations have not been proven in court.
The arrest comes days after ShinyHunters claimed responsibility for compromising FBIJobs.gov, the bureau’s recruiting website. The group claimed it obtained sensitive information about FBI personnel and people who applied for jobs with the agency. The FBI previously said it was investigating unauthorized activity affecting the site. The full scope of the incident and the amount of information obtained have not been publicly established.
Reuters reported that a sample of data linked to the breach included a spreadsheet containing names, personal identifiers and job assignments involving thousands of current and former FBI employees. Some records described work involving counterintelligence, surveillance and human intelligence. Reuters verified portions of the material using public information and other records but said it could not authenticate the entire dataset. The FBI has continued investigating the incident.
Dutch police said the arrested man is suspected of participating in a criminal organization. Authorities identified ShinyHunters as a hacking and extortion group connected to numerous data breaches involving victims in the Netherlands and other countries. The FBI similarly said the organization has targeted third-party vendors and cloud-based platforms, taking sensitive information and allegedly using threats of publication to demand payments.
The Dutch investigation also produced a separate and more serious allegation. Police said information found on the suspect’s laptop indicated that two killings abroad were allegedly supposed to be carried out and that investigators found indications the suspect may have ordered them. He is therefore also suspected of attempting to solicit two murders, according to Dutch police. Authorities stressed that those allegations are separate from the ShinyHunters investigation. They have not said that any killings resulted from the alleged plans.
Dutch authorities have not publicly named the suspect. Reuters reported that Dutch media identified him as Pepijn van der Stap and said his former employer, Amsterdam cybersecurity company Neo Security, confirmed his identity. Reuters said it could not reach him for comment and could not determine whether he had legal representation. ShinyHunters, meanwhile, issued a statement denying that the arrested man was associated with the group.
The case highlights the international nature of investigations involving cybercrime groups whose members, infrastructure and victims can be spread across several countries. Stan Duijf, the Dutch police official responsible for combating cybercrime, said arresting suspected cybercriminals is an important part of authorities’ broader response to such activity. Dutch police said ShinyHunters has been responsible for a large number of victims in the Netherlands and abroad.
The investigation remains active in both countries. Dutch investigators are examining the seized devices while the FBI said its teams are working with partners on additional leads stemming from the arrest. No further arrests had been announced as of Sept. 29, and the allegations against the detained suspect remain subject to investigation and court proceedings.
Author note: Last updated September 29, 2026.