THE FBI has arrested Edward Dubrovsky, a Canadian cybersecurity executive based in Toronto, on suspicion of involvement with the ShinyHunters group. The agency confirmed the arrest on 9 October via X, with Director Kash Patel stating the operation targeted another suspected co-conspirator linked to activities such as the recent FBIjobs[.]gov incident.
Dubrovsky, 54, is charged with conspiracy to threaten to impair the confidentiality of information with intent to extort money, and interference with commerce by threats. He is described as a former managing director at incident response firm Cypfer and currently connected with cyber-consulting firm CyberSteward, and is linked to a book on cyber extortion strategies that presents himself as an expert in negotiating with extortionists.
Dubrovsky’s arrest follows a series of prosecutions related to ShinyHunters, including Dutch authorities’ action against Pepijn van der Stap and Jordanian custody of 17-year-old Saif Al-din Khader (aka Rey) who is cooperating with investigators.
The group is tied to a September 2026 breach described as one of the more damaging government intrusions in recent history, after ShinyHunters allegedly exploited a vulnerability in Oracle PeopleSoft to access an FBI jobs site and then pivoted to AWS GovCloud to exfiltrate between 2 and 3 terabytes of data. The breach reportedly exposed sensitive information about FBI personnel, including names, addresses, dates of birth, and other identifiers. An Accenture contractor linked to the incident has been removed from duties for failing to patch the exploited vulnerability.