Back Dutchnews.Nl

Amsterdam man arrested over links to ShinyHunters hacking group

Dutchnews.Nl • September 29, 2026

A 24-year-old man from Amsterdam has been arrested on suspicion of involvement with the hacking group ShinyHunters, which has been behind a number of large-scale attacks on Dutch businesses in the past year.

Police said on social media that he was arrested this month and will appear in court in Rotterdam on Wednesday.

Sources told broadcaster NOS that the suspect is Pepijn van der S., who was sentenced to four years in prison in 2023 for extortion, money laundering and hacking. He was released this year.

Van der S. reportedly has a background in legitimate cybersecurity, having worked for Amsterdam-based security firm Hadrian. He also carried out ethical hacking research with the Dutch Institute for Vulnerability Disclosure. At the same time, he was leaking data stolen from clients and other companies, the court found in 2023.

ShinyHunters was responsible for an attack on Dutch telecoms provider Odido earlier this year, in which millions of customers had their personal data stolen. After the company refused to pay a ransom, the group posted much of the data on the dark web.

The hackers were also behind an attack on Canvas, an online learning platform used by students, after which its parent company paid a ransom to prevent further disruption.

Last week, ShinyHunters also claimed to have accessed the details of thousands of employees at the FBI, the US federal law enforcement agency. The FBI said an investigation was underway.

We could not provide the Dutch News service, and keep it free of charge, without the generous support of our readers. Your donations allow us to report on issues you tell us matter, and provide you with a summary of the most important Dutch news each day.

Help us to keep providing you with up-to-date news this month's Dutch general election.

Our thanks to everyone who donates regularly to Dutch News. It costs money to produce our daily news service, our original features and daily newsletters, and we could not do it without you.

If you have not yet made a donation, or did so a while ago, you can do so via these links

The DutchNews.nl team

Please help us making DutchNews.nl a better read by taking part in a short survey.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Dutch Hacker Arrested in ShinyHunters Investigation Following FBI Breach Dutch authorities arrested Pepijn van der Stap, a 24-year-old previously convicted hacker, on September 15, 2026, as part of an investigation into the ShinyHunters hacking group. This group claimed responsibility for a significant breach of the FBI's job application site, reportedly stealing sensitive data from over 6,000 FBI personnel. The attack method involved social engineering, where a Dutch-speaking caller impersonated an IT employee to gain access to internal systems. Van der Stap, who had been working as an offensive security lead at Neo Security, was previously convicted in 2023 for data theft and extortion. Following his arrest, ShinyHunters escalated their activities, including further attacks on the FBI and extorting the Cl0p ransomware group. The investigation is ongoing, and Van der Stap is expected to appear in court today. 80 sources 70

Extracted Entities

Amsterdam man arrested over links to ShinyHunters hacking group

The full story

Extracted Entities

Attack Types (2)

Companies (1)

CWE Weaknesses (1)

Domains (1)

MITRE ATT&CK (1)

Tools (1)