Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →The FBI says it and law-enforcement partners have arrested “multiple subjects” in an investigation into a September cyber incident allegedly involving ShinyHunters. The bureau has not given a total or identified everyone covered by that statement. Separately reported arrests in the Netherlands and Jordan should not be treated as a complete FBI-confirmed list.
How many people were arrested in the ShinyHunters FBI hack?
The FBI’s published count is “multiple”: it said investigators and partners had arrested multiple subjects, but did not specify how many or name those people in its statement to The Register on October 5, 2026. The bureau also declined to comment on specific arrests, including the reported detention of Saif al-Din Khader.
As an Amazon Associate I earn from qualifying purchases.
The FBI spokesperson told The Register: “The bureau continues to aggressively investigate the recent cyber incident allegedly involving ShinyHunters, having already worked with partners to arrest multiple subjects and we will spare no resource in bringing each of the responsible individuals to justice.” The statement confirms arrests in the investigation; it does not establish a public, complete roster.
Recommended Free Tools
Did ShinyHunters hack FBIJobs.gov?
The FBI had not publicly established where the breach occurred. In a September 23, 2026 statement, the agency said a cybercriminal enterprise group was claiming a compromise of fbijobs.gov and alleging impact to employee personally identifiable information. It said: “While the point of breach is still undetermined—whether a third-party or the FBI’s enterprise—we are actively and aggressively investigating this matter and working closely with those third-party providers that support fbijobs.gov to mitigate any and all risk.”
#1 Best Overall
ShinyHunters claimed it stole two to three terabytes of FBI- and Justice Department-related data and said it exploited a new Oracle PeopleSoft vulnerability. Those are the group’s claims, not findings confirmed by the FBI in contemporaneous reporting. CBS News reported that reviews of portions of the samples had not established that the records came from FBI systems.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What is known about the separately reported arrests?
Amsterdam: arrest reported before the FBIJobs.gov claim
CBS News reported that Dutch authorities arrested a 24-year-old in Amsterdam on September 15 on suspicion of ShinyHunters membership. FBI Director Kash Patel called the person “one of the alleged leaders.” CBS’s sources identified the suspect as Pepijn van der Stap, while Dutch police did not publicly name him in that report. This arrest preceded public reporting of the FBIJobs.gov claim, so it should not automatically be counted as one of the later arrests the FBI described.
Rank #2
CBS also quoted FBI Cyber Division Assistant Director Brett Leatherman as saying: “Since last year, this cybercriminal and his co-conspirators have allegedly breached more than 140 organizations and taken at least $70 million in extortion payments.” Those figures concern alleged activity by the alleged leader and co-conspirators; they are not a measure of the FBIJobs.gov incident.
Jordan: detention reported by Reuters’ sources
Reuters, republished by Investing.com, reported on October 4 that Saif al-Din Khader, also known as Rey, had been detained in Jordan and was reportedly cooperating with investigators. Reuters said the FBI declined to comment on the specific arrest or activity abroad. These details are attributed to Reuters’ sources, not to a public FBI identification of an arrestee.
Quick Recap
Best Value
Rank #3
What the FBI has and has not confirmed
- Confirmed by the FBI: investigators worked with partners to arrest “multiple subjects” in the investigation into a recent cyber incident allegedly involving ShinyHunters.
- Not publicly specified by the FBI: a precise arrest total, a complete list of people covered by “multiple,” and whether the separately reported Dutch and Jordan cases account for all or any of those arrests.
- Still alleged or unresolved: the breach point, the asserted volume and origin of the data, and the claimed PeopleSoft attack path.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
