Dutch Authorities Arrest Convicted Cybercriminal Linked to ShinyHunters Extortion Network

Law enforcement officials in the Netherlands have apprehended a 24-year-old convicted cybercriminal suspected of collaborating with the notorious hacking collective known as ShinyHunters. According to sources close to the ongoing investigation, the individual taken into custody is Pepijn van der Stap, a resident of Almere and Lelystad who previously faced prosecution for large-scale data thefts and extortion schemes.

The arrest comes at a volatile time for digital security professionals and global institutions. In the wake of the operation, remaining members of the ShinyHunters group launched a series of aggressive retaliatory cyberattacks, targeting high-profile entities including the Federal Bureau of Investigation. Reports from security researchers indicate that the attackers successfully compromised an FBI job application portal, exfiltrating sensitive background details, personnel titles, and documentation pertaining to agents handling complex cyber threats.

Investigators point out that the recent escalation in bold, disruptive intrusions stems partly from shifting internal dynamics within the cybercrime ecosystem. Security experts from organizations such as Mandiant and the Google Threat Intelligence Group have tracked how vulnerabilities in widely utilized human resources platforms, specifically Oracle’s PeopleSoft, were mass-exploited by threat actors to breach dozens of corporate and governmental networks across multiple sectors.

Prior to his recent detention, van der Stap had maintained a complex public profile, having completed a prison sentence handed down in late 2023 for offenses linked to data trafficking on underground English-language forums. While court documents and media interviews highlighted his subsequent employment within the offensive security sector and non-profit vulnerability disclosures, international law enforcement agencies have continued to tighten the net around individuals facilitating large-scale corporate data extortion.

The fallout from the ShinyHunters campaign underscores the persistent vulnerabilities facing enterprise software supply chains and cloud infrastructure. Cybersecurity analysts warn that organizations must maintain rigorous patch management protocols and robust web application firewall defenses to mitigate the evolving tactics employed by sophisticated extortion syndicates operating across international borders.

Source: Krebs on Security