A ShinyHunters suspect detained in Jordan is reportedly cooperating with the FBI, assisting investigators to track down other members of the group. Saif al-Din Khader was detained by Jordanian authorities, with sources citing his cooperation and ongoing talks with international law enforcement. Reuters notes Khader is now helping the FBI by sharing access to his devices and digital communications, enabling investigators to identify former associates and gather potential evidence beyond assurances of cooperation.
The development matters because ShinyHunters has claimed to have stolen data on FBI employees, including personal, professional and medical details, according to Reuters’ analysis. Dutch authorities have also linked a separate arrest to the group, with Pepijn van der Stap (aka Umbreon) appearing in Rotterdam court; the investigation suggests a possible leadership dispute within ShinyHunters, and investigators have pointed to interconnections between captured individuals and the group’s operations.
FBI and partner agencies say they are pursuing new leads and have already arrested multiple subjects, with the broader aim of bringing those responsible to justice. The story also notes disruption to ShinyHunters’ infrastructure, such as a dark web leak site going offline around the time of Khader’s detention, though the group remains active online and continues to leak or discuss data using other channels.