--- title: Cybersecurity Expert Tied to ShinyHunters FBI Data Breach description: The FBI arrested Canadian cybersecurity expert Edward Dubrovsky, accusing him of conspiring with the ShinyHunters extortion group in last month's breach of the... canonical: https://daily.dev/posts/cybersecurity-expert-tied-to-shinyhunters-fbi-data-breach-dlsunbatb twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Cybersecurity Expert Tied to ShinyHunters FBI Data Breach | daily.dev og:description: The FBI arrested Canadian cybersecurity expert Edward Dubrovsky, accusing him of conspiring with the ShinyHunters extortion group in last month's breach of the... og:url: https://daily.dev/posts/cybersecurity-expert-tied-to-shinyhunters-fbi-data-breach-dlsunbatb og:image: https://api.daily.dev/og/posts/dLSunBatB.png og:image:alt: Cybersecurity Expert Tied to ShinyHunters FBI Data Breach og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Cybersecurity Expert Tied to ShinyHunters FBI Data Breach **[Security Boulevard](https://daily.dev/sources/securityboulevard)** · 4 min read · 0 upvotes · 0 comments ## Summary The FBI arrested Canadian cybersecurity expert Edward Dubrovsky, accusing him of conspiring with the ShinyHunters extortion group in last month's breach of the agency's job portal, which exposed sensitive data on thousands of FBI employees including medical records. Dubrovsky, previously COO at incident-response firm Cypfer and now associated with CyberSteward, was arrested at a Pennsylvania cybersecurity conference and faces extortion conspiracy charges in Texas. His arrest follows those of other alleged ShinyHunters members, including Pepijn Van der Stap in the Netherlands and teenage hacker 'Rey' in Jordan, who is now cooperating with investigators. The FBI breach exploited a patched Oracle PeopleSoft vulnerability (CVE-2026-35273) after a contractor failed to apply a security patch; ShinyHunters has reportedly breached over 140 organizations and extorted $70 million since 2025. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What vulnerability did ShinyHunters exploit to breach the FBI's systems? ShinyHunters exploited CVE-2026-35273, a now-patched vulnerability in Oracle's PeopleSoft Enterprise PeopleTools platform. Attackers bypassed the web application firewall protecting the FBI site by URL-encoding a single character in the request path, a technique the PeopleSoft software was vulnerable to. The FBI later removed an Accenture contractor for failing to apply the security patch. _Teams running PeopleSoft or similar enterprise platforms follow patch-bypass techniques like this one on daily.dev._ ### Who has been arrested in connection with the ShinyHunters FBI breach? Multiple suspects have been detained: Canadian cybersecurity expert Edward Dubrovsky, former COO of incident-response firm Cypfer, arrested at a Pennsylvania conference; Pepijn Van der Stap, offensive security lead at Neo Security, arrested by Dutch authorities; and a teenage hacker known as 'Rey,' held in Jordan and now cooperating with investigators to identify other ShinyHunters members. _Incident responders tracking extortion-group takedowns can follow ShinyHunters developments on daily.dev._ ### How much damage has the ShinyHunters hacking group caused and how many organizations have they hit? ShinyHunters has breached more than 140 organizations since 2025 and extorted $70 million from victims, according to the FBI's Cyber Division head Brett Leatherman. The group has been active since 2019, with 2026 victims including GrubHub, Wynn Resorts, Telus Corporation, Telus Digital, and Carnival Cruise. _Security teams assessing extortion-group risk can track ShinyHunters' campaign scope on daily.dev._ ## Similar posts on daily.dev - [FBI to ShinyHunters: 'We know how to find you'](https://daily.dev/posts/fbi-to-shinyhunters-we-know-how-to-find-you--xaitvghvq) · The Register · 0 upvotes · 0 comments - [Council of Europe investigates ShinyHunters data breach claims](https://daily.dev/posts/council-of-europe-investigates-shinyhunters-data-breach-claims-psijygyzr) · BleepingComputer · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#ransomware](https://daily.dev/tags/ransomware), [#data-breach](https://daily.dev/tags/data-breach) [View this post on daily.dev](https://daily.dev/posts/cybersecurity-expert-tied-to-shinyhunters-fbi-data-breach-dlsunbatb) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Cybersecurity Expert Tied to ShinyHunters FBI Data Breach","url":"https://daily.dev/posts/cybersecurity-expert-tied-to-shinyhunters-fbi-data-breach-dlsunbatb","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/cybersecurity-expert-tied-to-shinyhunters-fbi-data-breach-dlsunbatb"},"datePublished":"2026-10-12T02:56:30.119Z","dateModified":"2026-10-12T02:57:24.057Z","description":"The FBI arrested Canadian cybersecurity expert Edward Dubrovsky, accusing him of conspiring with the ShinyHunters extortion group in last month's breach of the...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/38c2967fa0e722d06dcb3a796832a0a7?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/38c2967fa0e722d06dcb3a796832a0a7?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Security Boulevard","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Security Boulevard","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/3613c832180040de8d85bb29f74395be","url":"https://daily.dev/sources/securityboulevard"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/cybersecurity-expert-tied-to-shinyhunters-fbi-data-breach-dlsunbatb","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,ransomware,data-breach","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Security Boulevard","item":"https://daily.dev/sources/securityboulevard"},{"@type":"ListItem","position":3,"name":"Cybersecurity Expert Tied to ShinyHunters FBI Data Breach"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/cybersecurity-expert-tied-to-shinyhunters-fbi-data-breach-dlsunbatb#faq","mainEntity":[{"@type":"Question","name":"What vulnerability did ShinyHunters exploit to breach the FBI's systems?","acceptedAnswer":{"@type":"Answer","text":"ShinyHunters exploited CVE-2026-35273, a now-patched vulnerability in Oracle's PeopleSoft Enterprise PeopleTools platform. Attackers bypassed the web application firewall protecting the FBI site by URL-encoding a single character in the request path, a technique the PeopleSoft software was vulnerable to. The FBI later removed an Accenture contractor for failing to apply the security patch. Teams running PeopleSoft or similar enterprise platforms follow patch-bypass techniques like this one on daily.dev."}},{"@type":"Question","name":"Who has been arrested in connection with the ShinyHunters FBI breach?","acceptedAnswer":{"@type":"Answer","text":"Multiple suspects have been detained: Canadian cybersecurity expert Edward Dubrovsky, former COO of incident-response firm Cypfer, arrested at a Pennsylvania conference; Pepijn Van der Stap, offensive security lead at Neo Security, arrested by Dutch authorities; and a teenage hacker known as 'Rey,' held in Jordan and now cooperating with investigators to identify other ShinyHunters members. Incident responders tracking extortion-group takedowns can follow ShinyHunters developments on daily.dev."}},{"@type":"Question","name":"How much damage has the ShinyHunters hacking group caused and how many organizations have they hit?","acceptedAnswer":{"@type":"Answer","text":"ShinyHunters has breached more than 140 organizations since 2025 and extorted $70 million from victims, according to the FBI's Cyber Division head Brett Leatherman. The group has been active since 2019, with 2026 victims including GrubHub, Wynn Resorts, Telus Corporation, Telus Digital, and Carnival Cruise. Security teams assessing extortion-group risk can track ShinyHunters' campaign scope on daily.dev."}}]} ```