Cyber exec arrested in case allegedly tied to ShinyHunters hackers
Canadian cybersecurity executive Edward Dubrovsky has been arrested in Pennsylvania in connection with alleged extortion activity that multiple reports have linked to the FBI's ongoing crackdown on the ShinyHunters hacking group.
Canadian cybersecurity executive Edward Dubrovsky has been arrested in Pennsylvania in connection with alleged extortion activity that multiple reports have linked to the FBI's ongoing crackdown on the ShinyHunters hacking group.
Dubrovsky, 54, has had senior roles at cybersecurity firms that help data breach and ransomware victims negotiate extortion payments with cybercriminals.
Yesterday, FBI Director Kash Patel announced that agents had arrested .
The New York Times reported that the suspect was a Canadian citizen arrested in Pennsylvania and believed to be a primary co-conspirator in the recent ShinyHunters FBI Jobs hack .
Last night, both Politico and KrebsOnSecurity reported that Dubrovsky was arrested in Pennsylvania, where he was attending a cybersecurity conference.
While the FBI has not publicly confirmed that Dubrovsky is the suspected ShinyHunters co-conspirator, KrebsOnSecurity reports that multiple sources linked Dubrovsky's arrest to the ShinyHunters investigation.
Politico reports that CyberSteward is a trade name used by CYPFER and that the firms help organizations negotiate and send extortion payments to cybercriminals.
ShinyHunters is an extortion group known for stealing data from web applications and cloud-based SaaS platforms, then demanding ransom payments from victims or the stolen data would be published.
According to KrebsOnSecurity, Dubrovsky had previously posted on LinkedIn that he planned to attend the NetDiligence Cyber Risk Summit in Pennsylvania with the CyberSteward team.
More recently, ShinyHunters has increasingly targeted cloud environments and enterprise SaaS platforms, often using stolen credentials, authentication tokens, phishing, and social engineering to gain access to corporate systems and steal data.
A later court order says he was transferred to the Eastern District of Texas, where the charges were filed, with the order stating that he remains in custody.
Dubrovsky previously co-founded Canadian cybersecurity company CYPFER and has also been associated with CyberSteward, another firm specializing in ransomware negotiation and cyber-extortion response.
FBI tells ShinyHunters members to turn themselves in after recent arrest ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed attacks change, what defenders should stop doing, and how to validate, decide, fix, and re-validate at machine speed.
What happened
Canadian cybersecurity executive Edward Dubrovsky has been arrested in Pennsylvania in connection with alleged extortion activity that multiple reports have linked to the FBI's ongoing crackdown on the ShinyHunters hacking group.
Dubrovsky, 54, has had senior roles at cybersecurity firms that help data breach and ransomware victims negotiate extortion payments with cybercriminals.
Yesterday, FBI Director Kash Patel announced that agents had arrested .
What changed
The New York Times reported that the suspect was a Canadian citizen arrested in Pennsylvania and believed to be a primary co-conspirator in the recent ShinyHunters FBI Jobs hack .
Last night, both Politico and KrebsOnSecurity reported that Dubrovsky was arrested in Pennsylvania, where he was attending a cybersecurity conference.
While the FBI has not publicly confirmed that Dubrovsky is the suspected ShinyHunters co-conspirator, KrebsOnSecurity reports that multiple sources linked Dubrovsky's arrest to the ShinyHunters investigation.
Who is affected
Politico reports that CyberSteward is a trade name used by CYPFER and that the firms help organizations negotiate and send extortion payments to cybercriminals.
ShinyHunters is an extortion group known for stealing data from web applications and cloud-based SaaS platforms, then demanding ransom payments from victims or the stolen data would be published.
Why it matters
According to KrebsOnSecurity, Dubrovsky had previously posted on LinkedIn that he planned to attend the NetDiligence Cyber Risk Summit in Pennsylvania with the CyberSteward team.
More recently, ShinyHunters has increasingly targeted cloud environments and enterprise SaaS platforms, often using stolen credentials, authentication tokens, phishing, and social engineering to gain access to corporate systems and steal data.
Technical details
A later court order says he was transferred to the Eastern District of Texas, where the charges were filed, with the order stating that he remains in custody.
Dubrovsky previously co-founded Canadian cybersecurity company CYPFER and has also been associated with CyberSteward, another firm specializing in ransomware negotiation and cyber-extortion response.
FBI tells ShinyHunters members to turn themselves in after recent arrest ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
Response
Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed attacks change, what defenders should stop doing, and how to validate, decide, fix, and re-validate at machine speed.
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested an executive at a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive data on thousands of agents, multiple sources tell KrebsOnSecurity.
What security teams should do
One source close to the investigation told KrebsOnSecurity the Canadian person arrested this week was visiting Pennsylvania for a cyber insurance conference, and that the suspect’s company specialized in handling ransomware negotiations with cybercrime groups.
Another shared that control over the ShinyHunters investigation has been centralized at an FBI field office in Texas.
What remains unknown
Because the complaint against Dubrovsky remains sealed, it is still unclear what he is accused of doing or whether the case is connected to the FBI breach.
The FBI has not said whether the new arrest resulted from that cooperation.
It is unclear whether the disappearance of the group's main representative is connected to any of the recent arrests.
Attribution
BleepingComputer: Canadian cybersecurity executive Edward Dubrovsky has been arrested in Pennsylvania in connection with alleged extortion activity that multiple reports have linked to the FBI's ongoing crackdown on the ShinyHunters hacking group.
KrebsOnSecurity: Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested an executive at a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive data on thousands of agents, multiple sources tell KrebsOnSecurity.
The Hacker News: The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in a post on X .
BleepingComputer: The FBI has arrested another suspected member of the ShinyHunters extortion group believed to be involved in the recent breach of FBI systems, Director Kash Patel announced Friday.
What to watch next
Watch for additional victim details, indicators of compromise and follow-on exploitation reports.
Watch for revised vendor guidance, fixed versions and mitigation updates.