U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close to the investigation say one of the executives in the United States even helped ShinyHunters operate a website that pressured victims into paying a ransom.
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
About this summary. This is a short excerpt from the description that Krebs on Security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://krebsonsecurity.com/2026/10/feds-suspect-ransom-negotiator-ran-shinyhunters-extortion-site/
Source attribution: headline and facts are from Krebs on Security (krebsonsecurity.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe
The suspect is believed to be Edward Dubrovsky, a Canadian cybersecurity executive who was visiting the United States for a conference.
Canadian cybersecurity executive arrested in federal extortion case
Federal authorities arrested a Canadian cybersecurity executive Thursday in Pennsylvania on charges of conspiracy of extortion, according to federal court records posted…
FBI Arrests Founder of Ransomware Negotiation Firm
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an investigation into the…
Authorities seize KillSec extortion group infrastructure, arrest 3 alleged members
Authorities arrested the alleged leader and two additional members of KillSec, a data extortion group primarily run by teenagers that successfully compromised about 500…
🏴☠️ Rhysida has just published a new victim : Machelen (Belgium)
Machelen (Belgium) Machelen (Belgium) - municipal and social welfare (OCMW) file servers1.3 million files, ~2.9 TB. Working copy + backup copy (lawer2/lawer3).
Ransomware Incident at Paylogix Affects 41K Individuals
Data breaches have been announced by Paylogix, the Kenaitze Indian Tribe, the Center for Bone and Joint Surgery of the Palm Beaches, and Wichita Family Dental.