A major blow has been dealt to the notorious extortion group ShinyHunters, with reports emerging that its alleged leader, Saif al-Din Khader, also known as Rey, has been arrested in Jordan and is cooperating with the FBI. This development comes hot on the heels of a high-profile hack targeting the FBI’s jobs website, which resulted in the theft of sensitive data from thousands of employees.
Khader, a teenage cybercriminal from Amman, was reportedly arrested shortly after ShinyHunters defaced the FBI’s website and claimed to have stolen 2-3 terabytes of data. The group sent a sample list of 5,000 FBI employees to the media, boasting about possessing personal and health information belonging to current and former agents.
ShinyHunters’ alleged leader is also said to be involved with another extortion group, Scattered Lapsus$ Hunters. While it remains unclear where Khader is being detained, his arrest marks a significant turning point in the ongoing investigation into ShinyHunters. The FBI has confirmed that its investigation has led to the arrest of multiple individuals, including a 24-year-old man from Amsterdam last week.
This latest development highlights the global scope and complexity of cybercrime investigations. The Dutch police and the FBI have been working closely together to pursue leads in their respective countries. As part of this effort, the FBI had announced that it was actively working with partners to track down additional suspects.
FBI Director Kash Patel has hinted at further arrests, stating “more are on the table.” While the identities of some suspects remain unknown, investigative journalist Brian Krebs reported that Khader apparently implicated another individual in the recent hack. This suspect used the nickname Umbreon and was linked to previous extortion activities.
The ShinyHunters case serves as a stark reminder of the ongoing threat posed by cybercrime groups. These organizations often operate with impunity, using sophisticated tactics to extort millions from their victims. The fact that Khader is cooperating with the FBI could potentially lead to more arrests and provide valuable insights into the inner workings of these groups.
For individuals and organizations looking to protect themselves against similar threats, it’s essential to stay vigilant and proactive in cybersecurity measures. This includes implementing robust security protocols, monitoring for suspicious activity, and staying informed about emerging threats. As the ShinyHunters case demonstrates, even the most advanced cybercrime groups can be brought down with concerted effort from law enforcement agencies worldwide. By remaining aware of these risks and taking steps to mitigate them, individuals and organizations can better safeguard themselves against the ever-evolving threat landscape.
Source: SecurityWeek — 2026-10-05