[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fO5eI7F_JWqMvqRTkMfVBysQFmQayxxzs5MDG1fCpp6w":3},{"article":4,"iocs":52,"watch_terms":63,"solutions":64,"lesson":67},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"24984a2a-0f0e-4279-a505-7762779dfa1f","Dutch police confirm arrest in ShinyHunters hacking investigation","dutch-police-confirm-arrest-in-shinyhunters-hacking-investigation-e36cbd","Dutch police have confirmed that a 24-year-old Amsterdam man arrested earlier this month was detained as part of an investigation into the ShinyHunters hacking group. [...]","Dutch police have confirmed the arrest of a 24-year-old Amsterdam man in connection with the ShinyHunters hacking group. The suspect, identified as Pepijn van der Stap, previously known as 'Umbreon,' has a history of hacking and blackmail charges. Authorities are investigating a potential link between Van der Stap and ShinyHunters, citing his past use of 'Umbreon' imagery, which the group has also employed. However, ShinyHunters has denied any association with Van der Stap.","Dutch police arrest man linked to ShinyHunters hacking group investigation.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fdutch-police-confirm-arrest-in-shinyhunters-hacking-investigation\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2021\u002F10\u002F29\u002Farrest-cuffs.jpg","2026-09-28T19:49:10+00:00","2026-09-28T20:00:19.263501+00:00",7,[17,20,22,25,27],{"name":18,"type":19},"ShinyHunters","threat_actor",{"name":21,"type":19},"Umbreon",{"name":23,"type":24},"BreachForums","product",{"name":26,"type":24},"HackForums",{"name":28,"type":24},"Odido","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":29,"icon":31,"name":32,"slug":33},null,"Threat Intelligence","threat-intelligence",[35,40,45,50],{"category":36},{"id":37,"icon":31,"name":38,"slug":39},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":41},{"id":42,"icon":31,"name":43,"slug":44},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":46},{"id":47,"icon":31,"name":48,"slug":49},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":51},{"id":29,"icon":31,"name":32,"slug":33},[53,56,60],{"type":54,"value":18,"context":55},"malware","Hacking group investigated",{"type":57,"value":58,"context":59},"mitre_attack","T1078","Credential Access - Valid Accounts (implied by Odido hack description)",{"type":57,"value":61,"context":62},"T1566","Phishing (implied by Odido hack description)",[23,26,28],{"controls":65,"vendors":66},[],[],{"slug":68,"title":69,"body":70,"framework_refs":71,"framework_notes":83},"shinyhunters-suspect-arrested-lessons-in-attribution-and-threat-actor-tracking","ShinyHunters Suspect Arrested: Lessons in Attribution and Threat Actor Tracking","The arrest of a suspected ShinyHunters affiliate highlights the importance of persistent threat actor attribution and international law enforcement cooperation. ShinyHunters is responsible for numerous high-profile data breaches affecting millions of individuals, demonstrating the real-world harm caused by organized cybercriminal groups. The use of consistent aliases and imagery ('Umbreon') across platforms ultimately aided investigators in linking the suspect to the group, underscoring how digital footprints matter. Organizations that were victimized by ShinyHunters faced significant data exposure risks, reinforcing that robust breach detection and response capabilities are essential to limiting damage.",[72,73,74,75,76,77,78,79,80,81,82],"CIS Control 17 - Incident Response Management","CIS Control 3 - Data Protection","CIS Control 8 - Audit Log Management","NIST SP 800-61 Rev. 2 - Computer Security Incident Handling Guide","NIST AC-6 - Least Privilege","NIST IR-4 - Incident Handling","NIST AU-6 - Audit Record Review, Analysis, and Reporting","GDPR Article 33 - Notification of a personal data breach to the supervisory authority","GDPR Article 34 - Communication of a personal data breach to the data subject","MITRE ATT&CK - Exfiltration (TA0010)","ISO\u002FIEC 27035 - Information Security Incident Management",{}]