Dutch Police Arrest Convicted Hacker in ShinyHunters Investigation
Dutch police arrested a 24-year-old Amsterdam suspect, identified as Pepijn van der Stap, in the ShinyHunters investigation.
Dutch police confirmed that a 24-year-old Amsterdam man was arrested on September 16 in an investigation into the ShinyHunters extortion group and was due in court on Monday. The suspect is believed to be Pepijn van der Stap, convicted in 2023, previously known as Umbreon, and employed as offensive security lead at Neo Security while on supervised release. Brian Krebs reports the group's leader, a teenager nicknamed Ray in Amman and linked to Scattered Lapsus$ Hunters, blamed him for an FBI jobs-site hack that used a modified exploit for Oracle PeopleSoft CVE-2026-35273, which the group exploited as a zero-day in June. Police are also probing a social-engineering call against telecom Odido that exposed 6.2 million people's data; DataBreaches says the recorded voice is not van der Stap's.