Dutch Police Crack Down on ShinyHunters Hacking Group with Arrest of Notorious Hacker Pepijn van der Stap
In a significant development in the ongoing cat-and-mouse game between law enforcement and cybercrime groups, Dutch police have confirmed that they have arrested a 24-year-old Amsterdam man as part of an investigation into the notorious ShinyHunters hacking group. The suspect, identified by KrebsOnSecurity and DataBreaches as Pepijn van der Stap, is no stranger to the world of cybersecurity – he was previously arrested in January 2023 for hacking and blackmailing over a dozen companies worldwide.
Van der Stap, also known online as “Umbreon,” has a history of using Pokémon imagery on BreachForums, which has raised suspicions about his possible connection to ShinyHunters. The group made headlines recently for its involvement in the FBI breach and the defacement of the Clop ransomware gang’s data leak site. Interestingly, Van der Stap used the “Umbreon” alias as early as 2021 on BreachForums, but it’s worth noting that the same character appeared a year earlier in a 2020 defacement of the HackForums website.
The Dutch police investigation appears to have focused on Van der Stap’s potential link to ShinyHunters, and authorities seized electronic devices from his Amsterdam home during a search on September 15. While the police have confirmed that Van der Stap will face further questioning in court on Tuesday, September 29, it remains unclear what specific evidence they have gathered against him.
ShinyHunters has denied any connection to Van der Stap, with a representative telling BleepingComputer that he “has no association with us. Frankly, we are laughing.” However, the police investigation suggests that there may be more to this story than meets the eye. The question on everyone’s mind is: what other connections might Van der Stap have to ShinyHunters, and how far-reaching will this investigation be?
This arrest marks a significant milestone in the ongoing efforts of law enforcement to disrupt cybercrime groups like ShinyHunters. As the cybersecurity landscape continues to evolve, it’s essential for organizations to stay vigilant and adapt their defenses to keep pace with emerging threats. With AI-powered attacks on the rise, it’s more crucial than ever for defenders to be proactive in validating, deciding, fixing, and re-validating their security measures at machine speed.
As this story develops, one thing is clear: the arrest of Pepijn van der Stap sends a strong message to cybercrime groups that law enforcement will not tolerate their activities. However, it’s also a reminder that the cat-and-mouse game between hackers and authorities is far from over – stay tuned for further updates on this unfolding drama.
Source: Bleeping Computer — 2026-09-28