FBI strikes back at hacking group with overseas arrest of alleged leader
U.S. and Dutch authorities arrest alleged ShinyHunters leader in Amsterdam
Amsterdam, Netherlands — September 15, 2026 – In a coordinated effort between the Federal Bureau of Investigation and Dutch law‑enforcement agencies, police in Amsterdam detained a 24‑year‑old man suspected of heading the notorious cyber‑crime collective known as ShinyHunters. The suspect is also believed to have attempted to incite two murders, according to a statement from the Dutch National Police.
The arrest, made public on the same day by the Dutch High‑Tech Crime Unit, follows a joint operation that targeted a network linked to a string of high‑profile cyberattacks in the United States, the Netherlands, and other countries. “This morning @FBI and our partners the Dutch National Police are announcing the arrest of one of the alleged leaders of ShinyHunters – a global cybercrime and threat actor group linked to cyberattacks in the United States, the Netherlands, and around the world,” FBI Director Kash Patel wrote in a tweet that early Tuesday morning.
Cooperation across borders
The Dutch police released a statement detailing the nature of the arrest. “The man is also suspected of attempted incitement to commit two murders,” the release said. “Various data carriers have been seized and are being investigated further. Further arrests are not ruled out.” The seized electronic devices are currently under scrutiny, with investigators hoping to uncover additional suspects or evidence that could lead to further arrests.
In a separate comment, Brett Leatherman, assistant director of the FBI’s Cyber Division, addressed the hacking collective directly in a short video statement. “You know how to find us, and we know how to find you,” he said. “I suggest you reach out first while the choice is still yours.”
Leatherman’s statement is part of the FBI’s broader “Wraps Up Cybercrime Operation Targeting Global Networks Preying on Americans” campaign, which has already resulted in several high‑profile arrests and the seizure of digital infrastructure used in the attacks.
ShinyHunters in the spotlight
ShinyHunters, a name that has appeared in reports of data‑breach incidents, ransomware attacks, and phishing schemes, is believed to operate from multiple global locations. The group has been linked to attacks against U.S. financial institutions, healthcare providers, and government agencies. In the Netherlands, ShinyHunters is alleged to have coordinated operations that compromised Dutch corporate networks and targeted local government systems.
The suspect’s arrest marks the first significant U.S.‑aligned law‑enforcement action in the Netherlands against the group. Dutch police confirmed that the arrest was carried out under Dutch law, with the FBI investigators on site to assist and coordinate the operation.
Why this matters
Cyber‑crime groups that operate transnationally pose a significant threat to both public and private sector infrastructure. By disrupting the operations of a key player in ShinyHunters, U.S. and Dutch authorities aim to dismantle the network’s ability to conduct future attacks. The alleged murder‑incitement charges add a serious criminal dimension that underscores the potential real‑world harm these online actors can inflict.
The FBI’s statement noted that the operation is still ongoing. “As we speak, FBI teams are actively working with partners to obtain and execute more leads in the ongoing investigation based on this arrest,” the agency said. The statement also thanked Dutch National Police partners and industry collaborators who shared information that helped lead to the suspect’s capture.
Looking ahead
The Dutch High‑Tech Crime Unit and FBI investigators are continuing to review the seized devices and any related digital footprints. “Further arrests are not ruled out,” the Dutch release emphasized. The collaboration between the two agencies is expected to intensify as investigators dig deeper into the network’s structure, recruitment practices, and financial operations.
For now, the 24‑year‑old suspect remains in custody, and a court date has yet to be announced. Law‑enforcement officials say that the arrest is only one piece of a larger puzzle that includes other suspected ShinyHunters members worldwide. The investigation remains open, and updates will be issued as additional information becomes available.
This is a developing story. Check back for updates.
