The FBI has arrested another suspected member of the ShinyHunters extortion group believed to be involved in the recent breach of FBI systems, Director Kash Patel announced Friday.
"Our agents in the field have arrested another suspected co-conspirator of the ShinyHunters group — the group believed to be responsible for the recent FBIjobs.gov incident, which occurred on a platform managed by a third-party vendor," Patel said on X. "This is the latest arrest this FBI has made in a matter of days involving this network, as we work non-stop to dismantle the group."
The suspect is a Canadian citizen arrested in Pennsylvania who is considered a primary co-conspirator in the intrusion, according to the New York Times and CBS News. Authorities have not publicly disclosed the suspect's name or the specific charges.
ShinyHunters claimed in September that it accessed FBI systems by exploiting an Oracle PeopleSoft vulnerability before moving into FBI-managed AWS GovCloud infrastructure — claiming to have stolen between 2TB and 3TB of data, including information on current and former FBI employees, job applicants, medical and psychiatric records, Social Security numbers and home addresses.
The arrest is the latest in a fast-moving international crackdown. Saif al-Din Khader, known as "Rey," 16, was detained in Jordan in late September and is cooperating with the FBI, while Dutch authorities arrested 24-year-old Pepijn van der Stap in the Netherlands. The FBI says ShinyHunters has extorted more than $70 million from over 140 organizations since 2025.
"We will keep working with our partners to disrupt what's left of the ShinyHunters group and their associates, no matter where they operate," Patel said. Other suspected co-conspirators remain at large.