Dutch authorities have arrested a 24-year-old man from Amsterdam as part of an investigation into the ShinyHunters hacker group. The Dutch police confirmed that the man was arrested earlier this month and is suspected of playing a role in the cybercriminal group. He was scheduled to appear before a court in Rotterdam on September 29, where the court would consider whether he should remain in custody. Police have not publicly released full details about the investigation, and the case is still ongoing.
According to reports from Dutch media, the suspect has been identified as Pepijn van der S, although police themselves have not officially named him. He was previously convicted in 2023 for hacking companies, stealing data and extorting victims, receiving a four-year prison sentence, with part of the sentence suspended. After his release, he returned to the cybersecurity field and worked in legitimate security roles. Reports say he had previously worked at cybersecurity companies and was also involved with vulnerability research.
The arrest comes as ShinyHunters has been linked to several major cyberattacks and data theft incidents. Earlier this year, the group claimed responsibility for an attack against Dutch telecommunications provider Odido, where data connected to millions of people was stolen. The attackers reportedly gained access after a Dutch-speaking individual contacted an Odido helpdesk while pretending to be an IT employee. The person allegedly convinced an employee to enter login information and a verification code on a fake login page, giving the attackers access to internal systems.
After obtaining the Odido data, ShinyHunters demanded a ransom from the company, but Odido refused to pay. The stolen information was later published on the dark web, according to reports from Dutch media. ShinyHunters has also been connected to an attack involving Canvas, an online learning platform used by educational institutions, while the group has recently claimed responsibility for compromising an FBI job application website. The FBI confirmed that its website had been compromised and that an investigation was underway into the incident.
The investigation into the Amsterdam suspect is also connected to information gathered by Dutch authorities during their wider efforts to identify members of ShinyHunters. Police previously released an audio recording of a Dutch-speaking person who allegedly contacted the Odido helpdesk during the earlier attack and asked the public for help identifying the individual. ShinyHunters later claimed that the person heard in the recording was a member of its group, but Dutch authorities have not publicly confirmed that the arrested man is the same person. The group has also reportedly denied that the arrested suspect is affiliated with ShinyHunters.
The latest arrest highlights the continuing investigation into ShinyHunters and its activities across multiple countries. Authorities are examining the suspect’s possible connection to the group, while further details are expected as the legal proceedings continue. AP reported that Dutch prosecutors are also investigating a separate allegation involving an attempt to arrange two murders, based on information found on the suspect’s laptop, but police said this allegation is not connected to the ShinyHunters investigation. The case remains active, and Dutch authorities have not ruled out further developments or arrests as the investigation continues.
Stay alert, and keep your security measures updated!
Source: Follow cybersecurity88 on X and LinkedIn for the latest cybersecurity news
