When Your Ransomware Negotiator Works for the Other Side
FBI arrested ransomware negotiator Edward Dubrovsky on extortion charges tied to ShinyHunters, which also stole FBI employee data.
The FBI arrested Edward Dubrovsky, 54, a former Cypfer ransomware negotiator, on October 8, 2026, at the Philadelphia Cyber Risk Summit. He faces federal conspiracy-to-extort and commerce-interference charges tied to ShinyHunters, which the FBI says has taken in more than $70 million. The group allegedly exploited an unpatched Oracle PeopleSoft flaw on an Accenture-run FBI jobs site, moved into AWS GovCloud, and stole 2–3TB of employee data, including Social Security numbers of counterintelligence staff. Director Kash Patel confirmed the arrest; suspects were previously arrested in the Netherlands and Jordan.
- Dubrovsky, 54, was arrested October 8 at a Philadelphia cyber summit.
- Federal charges allege extortion conspiracy linked to ShinyHunters.
- Group allegedly stole 2–3TB of FBI employee data via unpatched PeopleSoft.
- Earlier suspects were arrested in the Netherlands and Jordan.
- Threat actors
- ShinyHunters
- Victims
- FBI
- Organizations
- FBICypferAccentureCyberStewardFileFlexQnextEdward DubrovskyKrebsOnSecurityBruce Schneier
- Countries
- United StatesNetherlandsJordanCanada
Coverage
oldest first · one row per article · UTC- · 18d ago
Cyber Security NewsFirst report
FBI Arrests Cybersecurity Executive in ShinyHunters-Linked Extortion Investigation
FBI arrested Canadian cybersecurity executive Edward Dubrovsky in Pennsylvania over alleged ShinyHunters extortion conspiracy.
- · 18d ago
GBHackers
FBI Arrests Canadian Cybersecurity Executive in ShinyHunters-Linked Cybercrime Investigation
FBI arrested Canadian cybersecurity executive Edward Dubrovsky in Pennsylvania, linked to the ShinyHunters extortion investigation.