Skip to content
Dutch Hacker Arrested in ShinyHunters Investigation Following FBI Breach

Dutch Hacker Arrested in ShinyHunters Investigation Following FBI Breach

First seen 28 Sep 2026, 17:08 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 29, 2026 at 16:22 UTC
  • •Pepijn van der Stap, a convicted hacker, was arrested for alleged ties to ShinyHunters.
  • •ShinyHunters claimed responsibility for a breach of the FBI's job application site, affecting over 6,000 personnel.
  • •The group escalated its activities following Van der Stap's arrest, indicating potential internal turmoil.

Dutch authorities arrested Pepijn van der Stap, a 24-year-old previously convicted hacker, on September 15, 2026, as part of an investigation into the ShinyHunters hacking group. This group claimed responsibility for a significant breach of the FBI's job application site, reportedly stealing sensitive data from over 6,000 FBI personnel. The attack method involved social engineering, where a Dutch-speaking caller impersonated an IT employee to gain access to internal systems. Van der Stap, who had been working as an offensive security lead at Neo Security, was previously convicted in 2023 for data theft and extortion. Following his arrest, ShinyHunters escalated their activities, including further attacks on the FBI and extorting the Cl0p ransomware group. The investigation is ongoing, and Van der Stap is expected to appear in court today.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Timeline

2026-06-11
CVE-2026-35273 published
A vulnerability in Oracle PeopleSoft was disclosed, exploited in the ShinyHunters FBI breach.
Krebsonsecurity
2026-09-15
Pepijn van der Stap arrested
Dutch police arrested Van der Stap as part of the ShinyHunters investigation, seizing electronic devices.
The Register
2026-09-29
Court appearance scheduled
Van der Stap is set to appear in Rotterdam District Court following his arrest.
Cbsnews

More articles in this cluster (99)

Following this threat?

Track Cl0p, ShinyHunters and Shinysp1d3r in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed