FBI Arrests Founder of Ransomware Negotiation Firm
FBI arrests co-founder of ransomware negotiation firm linked to ShinyHunters.
The FBI has arrested Edward Dubrovsky, co-founder of Canadian cybersecurity firm Cypfer (and associated with CyberSteward), in Pennsylvania. He is suspected of assisting the ShinyHunters hacking group, which recently breached the FBI and exfiltrated sensitive data on thousands of agents. Dubrovsky, who specializes in ransomware negotiations, was attending a cyber insurance conference at the time of his arrest. Federal court records charge him with cyber extortion and conspiracy.
AI summary of the linked source. Not reviewed by an editor. How this works
Run FBI?
Get an email when a new story names FBI, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThis case highlights the profound insider threat risk embedded within the cybersecurity supply chain — trusted third-party vendors and negotiators are granted privileged access to sensitive incident data, yet may not be subject to the same vetting standards as internal staff. Edward Dubrovsky's alleged collusion with ShinyHunters demonstrates that adversaries actively seek to compromise or recruit individuals in trusted intermediary roles, turning crisis-response relationships into attack vectors. Organizations that engage ransomware negotiators or IR firms share highly sensitive operational and organizational data under extreme duress, often with minimal due diligence. This matters because a compromised negotiator can exfiltrate victim data, extend attacker access, and undermine the integrity of the entire incident response process.