A suspect linked to the ShinyHunters cybercrime group, known online as “Rey,” has reportedly been detained in Jordan and is said to be cooperating with the US FBI to help identify other group members. The individual is identified as Saif al-Din Khader and has been brought into custody on 29 September 2026, according to Reuters, which cited three people familiar with the matter. The reporting notes that Rey’s cooperation is described as critical to ongoing efforts to arrest other hackers involved with the group.
The piece situates Rey within the broader ShinyHunters narrative, noting prior intelligence that tied him to roles as an administrator for a Hellcat ransomware group and for BreachForums, with claims of law-enforcement cooperation dating back to June 2025. It also references related actions in the same period, including arrests connected to ShinyHunters’ operations and the group’s controversial activity, such as hijacking a rival gang’s dark‑web site and other extortion-linked activity.
The FBI’s involvement and statements from FBI officials frame the arrests as part of an ongoing investigation, with authorities seeking to disrupt the group’s infrastructure and identify remaining members. The article also quotes researchers describing ShinyHunters as a resilient, modular brand rather than a single organisation, and highlights the group’s long-running presence in the cybercrime landscape.