Skip to content
ShinyHunters Hacker Arrested, FBI Data Breach Under Investigation

ShinyHunters Hacker Arrested, FBI Data Breach Under Investigation

First seen 7 Oct 2026, 14:27 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 7, 2026 at 14:28 UTC
  • •Saif al-Din Khader arrested in Jordan for ties to ShinyHunters.
  • •FBI employee data breach involved sensitive information, including medical records.
  • •Khader is cooperating with the FBI to identify other gang members.

Saif al-Din Khader, a 16-year-old linked to the ShinyHunters hacking group, was arrested in Jordan on September 29, 2026. He is reportedly cooperating with the FBI to identify other gang members following a significant breach of FBI employee data. Khader had previously admitted to being the technical operator for a group known as Scattered LAPSUS$ Hunters, which amalgamates several cybercrime groups. The breach involved the theft of sensitive information on FBI employees, including job assignments and medical records, and was acknowledged by the FBI in an internal memo. Following the breach, ShinyHunters threatened to release the data unless the FBI removed an advisory they disliked. However, they later claimed the hack was intended as a marketing campaign and stated they would not release the stolen data. The group's online communication channels have reportedly gone silent since Khader's arrest, indicating potential disruptions in their operations.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-29
Saif al-Din Khader arrested
Khader was detained in Jordan and is reportedly assisting the FBI in identifying other ShinyHunters members.
Silicon
2026-09-30
ShinyHunters communication channels go offline
The group's anonymized website and email address stopped responding following Khader's arrest.
Silicon
2026-10-07
FBI acknowledges data breach
The FBI confirmed a significant breach involving sensitive employee data, including job assignments and medical records.
Malwarebytes

More articles in this cluster (2)

Following this threat?

Track Accenture in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (18)

1 / 3

Common questions

What sensitive data was compromised?
The breach involved sensitive information on FBI employees, including job assignments and medical records.
Is the ShinyHunters group still operational?
Following Khader's arrest, their online communication channels have gone silent, indicating potential disruptions.
What actions is the FBI taking?
The FBI is aggressively investigating the breach and has arrested multiple subjects linked to the ShinyHunters group.