Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe
Ransomware response expert Edward Dubrovsky arrested in US for alleged involvement in ShinyHunters attacks.
Run FBI?
Get an email when a reviewed story names FBI, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
Canadian cybersecurity executive Edward Dubrovsky, specializing in ransomware response, has been arrested in the United States by the FBI. He is suspected of involvement in ShinyHunters attacks, including a recent breach of FBI systems that allegedly exposed information on nearly all agents and job applicants. The FBI attributed the intrusion to a contractor's failure to patch vulnerable Oracle PeopleSoft software.
The lesson from this incident
Full lessonThe breach of FBI systems was traced directly to a contractor's failure to patch vulnerable Oracle PeopleSoft software — a well-known, preventable attack vector. This incident underscores the compounding risk when third-party vendors with privileged access to sensitive government systems fail to maintain basic patch hygiene. The alleged involvement of a ransomware response professional further highlights that insider threats can originate from trusted cybersecurity partners, not just external adversaries. When contractors hold access to critical infrastructure, their security posture becomes part of your attack surface, making third-party risk management a mission-critical function.
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Third-party risk management (TPRM)
You know which suppliers could hurt you, and you hear quickly when one of them is breached.
Indicators of Compromise
- malware — ShinyHunters