Dutch police announced on September 15 the arrest of a 24-year-old Amsterdam resident suspected of leading the ShinyHunters cybercrime group. The detention occurred under Dutch criminal law and carries a minimum 90-day custody order pending court proceedings. Authorities allege the suspect participated in a criminal organization and attempted to orchestrate murders abroad, separate from the group's data theft operations.

The Federal Bureau of Investigation confirmed Dutch collaboration in the operation, with cyber division director Brett Leatherman stating the arrest protected victims and preserved evidence. Leatherman added the FBI would pursue remaining group members. Dutch officials noted investigators recovered extensive data from the suspect's laptop, including details about planned killings intended for execution outside the Netherlands.

ShinyHunters operates as a ransomware-as-a-service collective that infiltrates corporate networks to steal sensitive information. The group has targeted over 140 organizations globally, including Pornhub, Ticketmaster, and AT&T. Dutch authorities specifically linked the arrested individual to breaches of Pornhub and Ticketmaster but clarified he was not detained in connection with a separate incident involving Dutch telecommunications provider Odido.

Independent journalist Brian Krebs first reported the arrest, identifying the suspect as Pepijn van der Stap. According to Bloomberg and Reuters, van der Stap served as chief technology officer at Neo Security while maintaining dual activities as a cybersecurity researcher and criminal extortionist. Dutch police conducted the raid at Neo Security's offices, employing tactical equipment including flash-bang devices. The company's representative declined immediate comment to TechCrunch inquiries.

The ShinyHunters collective denied any association with the arrested individual through a spokesperson. Their statement characterized the FBI system breach as politically motivated rather than financially driven, asserting the intrusion aimed to counter what they described as false allegations against their organization. The group confirmed retaining stolen FBI personnel data but declared no intention to publish it.

An unrelated FBI internal notification revealed potential exposure of employee personal information through a compromised career portal. The breach reportedly included sensitive records such as medical samples and psychiatric evaluations belonging to approximately 5,000 agents. The FBI has not issued a public confirmation of the incident, though officials indicated it represents a counterintelligence concern extending beyond conventional data theft scenarios.