{"id":72557,"date":"2026-10-03T11:38:11","date_gmt":"2026-10-03T15:38:11","guid":{"rendered":"https:\/\/www2.stockmarketwatch.com\/stock-market-news\/shinyhunters-leader-detained-in-jordan-as-global-cyber-crackdown-intensifies\/72557\/"},"modified":"2026-10-03T11:38:11","modified_gmt":"2026-10-03T15:38:11","slug":"shinyhunters-leader-detained-in-jordan-as-global-cyber-crackdown-intensifies","status":"publish","type":"post","link":"https:\/\/www2.stockmarketwatch.com\/stock-market-news\/shinyhunters-leader-detained-in-jordan-as-global-cyber-crackdown-intensifies\/72557\/","title":{"rendered":"ShinyHunters Leader Detained in Jordan as Global Cyber Crackdown Intensifies"},"content":{"rendered":"<h2>Key Takeaways<\/h2>\n<ul>\n<li><strong>A high-ranking member of the ShinyHunters hacking collective has been detained in Jordan<\/strong> and is reportedly cooperating with international law enforcement agencies.<\/li>\n<li><strong>The arrest follows a massive breach of FBI systems<\/strong> in late September 2026, where the group claimed to have exfiltrated <strong>2 to 3 terabytes of sensitive data<\/strong>, including records of 5,000 employees.<\/li>\n<li><strong>Law enforcement has accelerated its global sweep<\/strong>, with a 24-year-old suspected leader already in Dutch custody and facing charges related to hacking and attempted murder solicitation.<\/li>\n<li><strong>The group exploited a zero-day vulnerability in Oracle (<a href=\"\/stock\/ORCL\">ORCL<\/a>) PeopleSoft<\/strong> to gain unauthorized access to AWS GovCloud servers hosted by Amazon (<a href=\"\/stock\/AMZN\">AMZN<\/a>).<\/li>\n<\/ul>\n<p>In a significant blow to one of the world\u2019s most prolific cybercrime syndicates, sources indicate that a key member of <strong>ShinyHunters<\/strong> has been detained in <strong>Jordan<\/strong>. The individual, identified by some investigators as a teenage leader nicknamed &quot;Ray,&quot; is reportedly cooperating with law enforcement. This development comes just days after the group executed a brazen retaliatory hack against the <strong>FBI<\/strong>, exposing the personal information of thousands of federal agents and their families.<\/p>\n<p>The detention in Jordan follows the mid-September arrest of <strong>Pepijn van der Stap<\/strong> (known online as &quot;Umbreon&quot;) in Amsterdam. Van der Stap, a 24-year-old convicted hacker, was allegedly serving as a primary operative for the group while on supervised release. Dutch authorities have placed him in 90-day pretrial detention, investigating his role in the <strong>ShinyHunters<\/strong> extortion schemes and an unrelated plot to solicit two murders abroad.<\/p>\n<p>The group\u2019s recent activity has targeted high-profile infrastructure, utilizing a patched vulnerability in <strong>Oracle (<a href=\"\/stock\/ORCL\">ORCL<\/a>) PeopleSoft<\/strong> software to bypass security measures. By gaining access to <strong>AWS GovCloud<\/strong> servers managed by <strong>Amazon (<a href=\"\/stock\/AMZN\">AMZN<\/a>)<\/strong>, the hackers were able to deface the <strong>FBI<\/strong> recruitment website and steal psychiatric records, medical evaluations, and social security numbers. <em>Market analysts suggest these high-profile breaches may force enterprise software providers to accelerate the deprecation of legacy cloud integrations.<\/em><\/p>\n<p><strong>ShinyHunters<\/strong> has been a persistent threat since 2019, allegedly responsible for over 140 organizational breaches and more than <strong>$70 million<\/strong> in extortion payments. The group recently shifted from financial extortion to &quot;ego-driven&quot; warfare, claiming their latest attack was a response to &quot;disinformation&quot; published by the <strong>FBI<\/strong> regarding their methods. As the investigation expands, law enforcement officials, including <strong>FBI Director Kash Patel<\/strong>, have signaled that further international arrests are imminent.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Key Takeaways A high-ranking member of the ShinyHunters hacking collective has been detained in Jordan and is reportedly cooperating with [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":50383,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"rank_math_schema_Article":[],"rank_math_focus_keyword":[],"rank_math_description":[],"financial_data_references":[],"stock_symbols_mentioned":[],"footnotes":""},"categories":[5012],"tags":[5035,6120,6430,6873,6879,12819,22910],"class_list":["post-72557","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-breaking-news","tag-cybersecurity","tag-oracle-orcl-stock-orcl","tag-amazon-amzn-stock-amzn","tag-fbi","tag-data-breach","tag-cybercrime","tag-shinyhunters"],"_links":{"self":[{"href":"https:\/\/www2.stockmarketwatch.com\/stock-market-news\/wp-json\/wp\/v2\/posts\/72557","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www2.stockmarketwatch.com\/stock-market-news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www2.stockmarketwatch.com\/stock-market-news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www2.stockmarketwatch.com\/stock-market-news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www2.stockmarketwatch.com\/stock-market-news\/wp-json\/wp\/v2\/comments?post=72557"}],"version-history":[{"count":0,"href":"https:\/\/www2.stockmarketwatch.com\/stock-market-news\/wp-json\/wp\/v2\/posts\/72557\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www2.stockmarketwatch.com\/stock-market-news\/wp-json\/wp\/v2\/media\/50383"}],"wp:attachment":[{"href":"https:\/\/www2.stockmarketwatch.com\/stock-market-news\/wp-json\/wp\/v2\/media?parent=72557"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www2.stockmarketwatch.com\/stock-market-news\/wp-json\/wp\/v2\/categories?post=72557"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www2.stockmarketwatch.com\/stock-market-news\/wp-json\/wp\/v2\/tags?post=72557"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}