FBI arrests Canadian ransomware negotiator Edward Dubrovsky in ShinyHunters extortion probe
The FBI arrested a Canadian cybersecurity executive in Pennsylvania on October 8, 2026, in connection with its investigation into the ShinyHunters extortion group. Court records point to Edward Dubrovsky, a ransomware negotiation specialist formerly of Cypfer and now associated with CyberSteward. He faces charges of conspiracy to threaten to impair the confidentiality of information with intent to extort, and interference with commerce by threats. The case has been moved to the Eastern District of Texas, which sources describe as the center of the ShinyHunters investigation. Sources say charges against principals at other ransomware negotiation firms may follow. The identification rests on court records and unnamed sources, and the FBI declined to comment.
Technical Details
- ShinyHunters typically uses phishing and stolen credentials to siphon data from corporate accounts at SaaS companies, then threatens to publish the data unless a ransom is paid. The FBI says the group has extorted more than $70 million this year.
- The group recently stole data from the FBI's online recruitment portal, including each person's unit and specialization and medical and psychiatric records.
- Dutch police arrested convicted cybercriminal Pepijn van der Stap last month, and the FBI is examining the seized devices. The group member "Rey", reportedly Saif Al-din Khader, then took over the group. Reuters reported that Rey has been detained and is cooperating with investigators.
- The group allegedly sought to extort a navigation and digital aviation unit that Boeing divested in late 2025.
- Cypfer says Dubrovsky was a managing director who resigned in December 2025, not a founder as his LinkedIn profile claimed.
Remediation
The article gives no remediation guidance. Organizations that use third-party ransomware negotiators should review those relationships and their due diligence as the investigation develops.
Linha do tempo
-
FBI arrests Canadian ransomware negotiator Edward Dubrovsky in ShinyHunters extortion probe
ler a análise desta fonte ocultar
The FBI arrested a Canadian cybersecurity executive in Pennsylvania on October 8, 2026, in connection with its investigation into the ShinyHunters extortion group. Court records point to Edward Dubrovsky, a ransomware negotiation specialist formerly of Cypfer and now associated with CyberSteward. He faces charges of conspiracy to threaten to impair the confidentiality of information with intent to extort, and interference with commerce by threats. The case has been moved to the Eastern District of Texas, which sources describe as the center of the ShinyHunters investigation. Sources say charges against principals at other ransomware negotiation firms may follow. The identification rests on court records and unnamed sources, and the FBI declined to comment.
Technical Details
- ShinyHunters typically uses phishing and stolen credentials to siphon data from corporate accounts at SaaS companies, then threatens to publish the data unless a ransom is paid. The FBI says the group has extorted more than $70 million this year.
- The group recently stole data from the FBI's online recruitment portal, including each person's unit and specialization and medical and psychiatric records.
- Dutch police arrested convicted cybercriminal Pepijn van der Stap last month, and the FBI is examining the seized devices. The group member "Rey", reportedly Saif Al-din Khader, then took over the group. Reuters reported that Rey has been detained and is cooperating with investigators.
- The group allegedly sought to extort a navigation and digital aviation unit that Boeing divested in late 2025.
- Cypfer says Dubrovsky was a managing director who resigned in December 2025, not a founder as his LinkedIn profile claimed.
Remediation
The article gives no remediation guidance. Organizations that use third-party ransomware negotiators should review those relationships and their due diligence as the investigation develops.