Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
Dutch police arrest alleged ShinyHunters associate; group escalates attacks.
Dutch authorities have arrested Pepijn van der Stap, a convicted cybercriminal, on suspicion of aiding the ShinyHunters group. Following his arrest, ShinyHunters reportedly escalated attacks, stealing data from the FBI and extorting the Cl0p ransomware group. Van der Stap, previously convicted for data theft and extortion, had claimed to be reformed and was working in cybersecurity.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Hadrian?
Get an email when a new story names Hadrian, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonPepijn van der Stap, a previously convicted cybercriminal, was permitted to work in the cybersecurity industry despite a documented history of data theft and extortion — illustrating a critical failure in personnel vetting and access control. His alleged involvement with ShinyHunters demonstrates how insider threats can originate from individuals with privileged knowledge of security systems and methodologies. The subsequent escalation of attacks following his arrest — including data theft from the FBI and extortion of the Cl0p group — underscores how a single compromised actor can amplify broader criminal operations. This case highlights why trust must be continuously verified rather than assumed based on self-reported reform, particularly in roles that grant access to sensitive systems and intelligence.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — ShinyHunters
- malware — Cl0p
- mitre_attack — T1566.002