Dutch man arrested in ShinyHunters investigation, police say
by@Reuters
Summary
A 24-year-old Dutch man, identified as Pepijn van der Stap, was arrested as part of a Dutch police investigation into the hacking group ShinyHunters. Known for his transition from cybercriminal to cybersecurity professional, Van der Stap's arrest came during a dramatic police raid on September 15, amid rising concerns about ShinyHunters' theft of sensitive personnel data from US FBI servers, which included intelligence assignments and medical records. His former employer, Benjamin Korper, expressed shock at the arrest, emphasizing that he had carefully vetted and monitored Van der Stap, who had previously been publicly disavowed for his past cybercrimes.
Analysis
FBI: The FBI is the primary federal law enforcement agency of the United States responsible for investigating major cyber incidents. The agency is currently handling the investigation into the ShinyHunters breach of its servers and is communicating with potentially impacted staff. An internal memo indicated the bureau is presuming data on all employees may have been stolen. Neo Security: Neo Security is an Amsterdam-based cybersecurity company focused on offensive security services. The firm employed Pepijn van der Stap as its offensive security lead until his arrest. Dutch forensic investigators visited the company's offices the night of the arrest, and the executive stated he had vetted and monitored the employee while hiring external checks afterward. ShinyHunters: ShinyHunters is a hacker group known for large-scale data breaches and extortion operations. The group recently claimed responsibility for stealing sensitive personnel data from US FBI servers, including intelligence assignments and medical records. In response to the arrest, the group stated the suspect had no association with them and described Dutch police actions as incompetent. Benjamin Korper: Benjamin Korper is an executive at Amsterdam-based cybersecurity company Neo Security. He publicly identified the arrested suspect as his employee Pepijn van der Stap and described being shocked by the news despite prior vetting and monitoring. Korper stated that external investigators found no evidence the individual had acted against the company or its clients. Pepijn van der Stap: Pepijn van der Stap is a 24-year-old Dutch individual previously convicted of data theft and extortion who later publicly reformed and entered cybersecurity work. He served as offensive security lead at Neo Security prior to his arrest by Dutch police in a raid connected to the ShinyHunters investigation. Van der Stap and the group have both denied any association between them. Data Breach: ShinyHunters has claimed to have stolen sensitive personnel data from US FBI servers, including intelligence assignments and medical records. Investigation: Dutch police arrested a suspect in connection with their probe into ShinyHunters activities, with the individual set to appear in Rotterdam court. Cybersecurity Hiring: Security firms have hired reformed hackers as professionals, with executives citing the need to provide second chances while conducting ongoing monitoring.
Categories
politicstech