Netherlands Arrests Man FBI Identified as an Alleged ShinyHunters Leader

Dutch police arrested a 24-year-old man from Amsterdam on suspicion of involvement in the ShinyHunters group. The FBI identified him as one of the group’s alleged leaders.

Dutch police arrested a 24-year-old man from Amsterdam as part of an investigation into the ShinyHunters hacking group. The FBI identified him as one of ShinyHunters’ alleged leaders. The man was arrested on September 15, while Dutch authorities reported the case on September 29 and did not release his name.

Police suspect the man of participating in a criminal organization. During the operation, they seized data storage devices and said they had not ruled out further arrests in the investigation. On September 29, a court in Rotterdam ruled that the suspect would remain in custody for at least another 90 days.

ShinyHunters’ alleged leaders according to the FBI

The identification of the arrested man as one of the group’s alleged leaders came from the U.S. Federal Bureau of Investigation. Dutch police did not publicly describe him this way in their own statement and have not yet released details linking him to specific cyberattacks attributed to ShinyHunters.

The FBI said that ShinyHunters and its co-conspirators allegedly attacked more than 140 organizations since last year and obtained at least $70 million in ransom payments. This is an assertion by the U.S. investigative agency; the arrested man’s criminal guilt has not been established by a court.

The case involves a group associated with data theft and extortion of organizations. The seized electronic devices and data storage media could be important to investigators as they examine possible additional individuals, the infrastructure used and the organizations affected.

Separate suspicion of attempting to commission murders

Dutch police also said they suspect the man of attempting to commission two murders abroad. According to police, this part of the investigation is unrelated to the ShinyHunters case. No further details of this suspicion have been made public.

Separating the two investigative strands is important: information about the alleged attempts to commission murders is not evidence linking this part of the case to the hacking group’s activities. It has likewise not been independently confirmed that the arrested man personally carried out specific attacks that the FBI attributes to ShinyHunters.

What may happen next in the investigation

Dutch police announced the possibility of further arrests but did not identify a specific person or provide a timeline. Further developments could include a decision by prosecutors or a court on formal charges, as well as new information about the arrested man’s identity and his alleged role in the group.

It will also be important whether investigators disclose links to individual incidents and whether the FBI or affected organizations independently clarify the scope of the attacks and damage attributed to the group. ShinyHunters’ claim that data from approximately 38,000 FBI employees was stolen was not confirmed in the official materials used.

The arrest is part of an international effort against financially motivated cybercrime groups. However, based on the information currently available, these remain suspicions and an FBI assessment, not legally established guilt on the part of the arrested man.

Sources

  • Politie.nl – Confirms the suspect’s arrest date, age and city, the suspicion of involvement in ShinyHunters, the seizure of storage media, the separate murder-related investigation and the decision on an additional 90 days in custody.
  • FBI – The FBI identifies the arrested man as one of ShinyHunters’ alleged leaders and provides its estimates of the number of organizations attacked and the ransom obtained.
  • Associated Press – Independently confirms the arrest, the separate suspicion related to two murders and the decision on 90 days in custody.

Verified and updated: September 30, 2026 06:20

Sharing