Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation
Dutch police arrested a 24-year-old Amsterdam man identified as Pepijn van der Stap in the ShinyHunters case.
Dutch police confirmed the arrest this month of a 24-year-old Amsterdam man in a ShinyHunters investigation, with a Rotterdam District Court hearing set for September 29, 2026. Brian Krebs and DataBreaches.net identified him as Pepijn van der Stap, also known as Umbreon, previously arrested in 2023 and later linked to Hadrian, DIVD, and Neo Security. The article also says ShinyHunters claimed to have stolen terabytes from the FBI job site apply.fbijobs.gov. Analysts now assess the access used a URL-encoding trick to bypass WAF rules for Oracle PeopleSoft flaw CVE-2026-35273, while the group said the incident was not ransom or financially motivated.