Cyber Risks · Krebs on Security

Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation

Summary: Dutch authorities arrested 24-year-old Pepijn van der Stap, a convicted cybercriminal who hacked under the handle "Umbreon," on suspicion of aiding data thefts and extortions by ShinyHunters; police confirmed the arrest. Van der Stap had been convicted in 2023 for thefts and extortions earning between €1.5 million and €2.7 million, was released from prison in December 2025, and was working as offensive security lead at Dutch company Neo Security when he was detained on or around September 16.

What you should know: Days after the arrest, ShinyHunters stole Social Security numbers and psychiatric and medical files on more than 5,000 FBI officials through a PeopleSoft flaw, and a Mandiant researcher said the group is on track to pull in nearly $100 million in extortion payments in 2026.

Read the original at Krebs on Security ↗

Topics
Cybercrime & Law Enforcement
Related