Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation
Dutch police arrest 24-year-old Amsterdam man linked to ShinyHunters hacker group.
Dutch authorities arrested a 24-year-old Amsterdam resident identified as Pepijn van der Stap (aka Umbreon) in connection with the ShinyHunters hacking group. Van der Stap, previously arrested in 2023 for data theft and extortion, was working as an offensive security lead at Neo Security while allegedly conducting illicit activities. The arrest comes as ShinyHunters claimed responsibility for breaching the FBI's job application portal and stealing terabytes of sensitive data, claiming the attack was a marketing campaign rather than extortion.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Oracle?
Get an email when a new story names Oracle, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonVan der Stap's case illustrates a dangerous insider threat scenario where a trusted offensive security professional allegedly leveraged his privileged knowledge and access to conduct criminal activity. Organizations hiring security personnel — especially those with prior criminal records — must implement rigorous background screening and continuous behavioral monitoring. The dual role of 'defender by day, attacker by night' highlights how access to sensitive systems and security tooling can be weaponized from within. This case also underscores that threat actors within the ShinyHunters group are not anonymous outsiders but may be embedded inside legitimate organizations, making supply chain and personnel vetting critical controls.
What helps against this
How we list vendors
- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
- Third-party risk management (TPRM)
You know which suppliers could hurt you, and you hear quickly when one of them is breached.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-35273