Back to Feed
Threat IntelligenceSep 28, 2026

Dutch police confirm arrest in ShinyHunters hacking investigation

Dutch police arrest man linked to ShinyHunters hacking group investigation.

Dutch police have confirmed the arrest of a 24-year-old Amsterdam man in connection with the ShinyHunters hacking group. The suspect, identified as Pepijn van der Stap, previously known as 'Umbreon,' has a history of hacking and blackmail charges. Authorities are investigating a potential link between Van der Stap and ShinyHunters, citing his past use of 'Umbreon' imagery, which the group has also employed. However, ShinyHunters has denied any association with Van der Stap.

AI summary of the linked source. Not reviewed by an editor. How this works

Vendor Watch

Run BreachForums?

Get an email when a new story names BreachForums, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

The lesson from this incident

Full lesson

The arrest of a suspected ShinyHunters affiliate highlights the importance of persistent threat actor attribution and international law enforcement cooperation. ShinyHunters is responsible for numerous high-profile data breaches affecting millions of individuals, demonstrating the real-world harm caused by organized cybercriminal groups. The use of consistent aliases and imagery ('Umbreon') across platforms ultimately aided investigators in linking the suspect to the group, underscoring how digital footprints matter. Organizations that were victimized by ShinyHunters faced significant data exposure risks, reinforcing that robust breach detection and response capabilities are essential to limiting damage.

Indicators of Compromise

Extracted by AI from the linked source. Not reviewed by an editor. How this works

  • malware — ShinyHunters
  • mitre_attack — T1078
  • mitre_attack — T1566

Entities

ShinyHunters (threat_actor)Umbreon (threat_actor)BreachForums (product)HackForums (product)Odido (product)