{"id":3234,"date":"2026-09-29T10:23:56","date_gmt":"2026-09-29T10:23:56","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=3234"},"modified":"2026-09-29T10:23:56","modified_gmt":"2026-09-29T10:23:56","slug":"dutch-police-arrest-24-year-old-amsterdam-man-in-shinyhunters-investigation","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=3234","title":{"rendered":"Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation"},"content":{"rendered":"
\n

\ue804<\/i>Ravie Lakshmanan<\/span>\ue802<\/i>Sep 29, 2026<\/span><\/span>United States<\/span><\/p>\n<\/div>\n

\n
<\/a><\/div>\n

Dutch authorities have confirmed that they arrested a 24-year-old man from Amsterdam in connection with the ShinyHunters group.<\/p>\n

\u00abIt is true that this month a 24-year-old man from Amsterdam was arrested in an investigation into the hacker group ShinyHunters,\u00bb the Politie Landelijke Opsporing en Interventies said<\/a> in an X post Monday.<\/p>\n

Police said the individual is expected to appear before the Rotterdam District Court on September 29, 2026.<\/p>\n

Although law enforcement officials did not disclose any additional details, independent security journalist Brian Krebs<\/a> and DataBreaches.Net<\/a> identified the arrested man as Pepijn van der Stap (aka Umbreon), who was previously apprehended<\/a> in 2023 for his role in a series of data thefts and extortions.<\/p>\n

Per DataBreaches.Net, van der Stap was arrested<\/a> on September 15, 2026. In 2023, it emerged that the individual worked at cybersecurity company Hadrian and volunteered at the Dutch Institute for Vulnerability Disclosure (DIVD).<\/p>\n

\u00abWorking at Hadrian and volunteering at DIVD made me more paranoid about keeping up appearances, and I actually felt more pressure and paranoia because I was working such long hours,\u00bb van der Stap told<\/a> DataBreaches.Net in June 2023.<\/p>\n

\u00abSo yes, I was doing more lawful work and much less illegal work but I became more paranoid about getting caught. The paranoia became so extreme that I was expecting a knock on the door at any time.\u00bb<\/p>\n

He is presently employed as the offensive security lead at the Dutch company Neo Security, according to LinkedIn.<\/p>\n

In his profile, van der Stap acknowledged his journey \u00abhasn’t been a straight line\u00bb and that \u00abI’ve seen security from both sides of the terminal, an experience that taught me hard lessons but ultimately gave me clarity: knowledge is for building and protecting, not breaking.\u00bb<\/p>\n

The development comes as ShinyHunters claimed credit for its brazen hack of the U.S. Federal Bureau of Investigation’s (FBI) job application site apply.fbijobs.gov, stealing terabytes of sensitive data.<\/p>\n

\u00abThis was all a marketing campaign to protect our business and actively combat disinformation,\u00bb a ShinyHunters representative told<\/a> 404 Media. \u00abIf we made this statement normally then this much attention to our words and intentions would\u2019ve never been this widespread.\u00bb<\/p>\n

\u00abWe’d have been ignored and disregarded. However, now everyone knows what the issue is and what we are doing. Everyone is reading about it. We proved our points on several occasions. We do not care what the public says and we are not affected by it nor do we cloud our judgement by external opinions and thoughts.\u00bb<\/p>\n

In a statement shared with The Hacker News, the group reiterated again that the attack on the FBI’s systems was not extortion and that it’s not financially motivated.<\/p>\n

\u00abWe understand why many misinterpreted this as extortion and are convinced we would publish this data and\/or misuse it such as selling to third parties due to our history in past operations which has never involved a government entity of prominence,\u00bb the spokesperson said.<\/p>\n

\u00abWe again want to emphasise that this is not extortion, it was never one to begin with, not a threat, not a ransom, and not financially motivated. Nothing will happen. We are way past this situation in our business operations and we confidently believe we have been successful due to seeing a recent influx of success in our operations.\u00bb<\/p>\n

Although the group said it exploited a new zero-day flaw in Oracle PeopleSoft to gain unauthorized access and siphon the data, it’s now assessed that ShinyHunters employed a URL-encoding trick to bypass web application firewall (WAF) rules designed to mitigate CVE-2026-35273.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

\ue804Ravie Lakshmanan\ue802Sep 29, 2026United States Dutch authorities have confirmed that they arrested a 24-year-old man from Amsterdam in connection with the ShinyHunters group. \u00abIt is true that this month a…<\/p>\n","protected":false},"author":1,"featured_media":3235,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[3581,3582,3580,1847,3583,2600,1199,1615],"class_list":["post-3234","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-24yearold","tag-amsterdam","tag-arrest","tag-dutch","tag-investigation","tag-man","tag-police","tag-shinyhunters"],"_links":{"self":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/3234","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3234"}],"version-history":[{"count":0,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/3234\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/media\/3235"}],"wp:attachment":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3234"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3234"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3234"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}