Dutch police arrest ShinyHunters suspect after alleged FBI data breach claim


An FBI agent stands near a security point at Los Angeles Stadium ahead of the 2026 World Cup Group G football match

Amsterdam, 29 September 2026— Dutch authorities have detained a 24‑year‑old man suspected of belonging to the ShinyHunters cyber‑criminal collective, which claimed to have stolen data on every FBI agent.


ShinyHunters announced on social media that it had breached the FBI’s Oracle cloud storage system and exposed details of around 38,000 bureau staff, including names, badge numbers and personal addresses. The claim surfaced after the group's alleged hack on 21 September.


Police released a statement that the suspect was arrested on 15 September in Amsterdam, before the FBI attack was reported. During the arrest, investigators seized the suspect’s laptop, which contained information on two planned murders abroad and evidence suggesting the suspect may have ordered them.


Stan Duijf, head of Dutch cyber‑crime investigations, said the arrest marked a “significant step” in the ongoing probe. “The ShinyHunters group has caused a large number of national and international victims,” Duijf added.


Brett Leatherman, assistant director of FBI Cyber, urged members of the group to surrender, warning that “the longer you stay in this, the more we learn about you, you know how to find us, we know how to find you.”


The FBI’s public‑service announcement on 5 May labeled ShinyHunters a “threat actor” that targets major tech, finance and retail firms. The agency has expelled the group’s recent claims as a political distraction.


Dutch officials said further arrests were possible as investigations continue. The suspect remains in custody.