Brokers with the Federal Bureau of Investigation (FBI) on Thursday arrested an govt at a Canadian cybersecurity agency in reference to an investigation into the ShinyHunters hacking group that lately relieved the FBI of delicate knowledge on 1000’s of brokers, a number of sources inform KrebsOnSecurity.
The New York Occasions reported at the moment that the FBI has arrested a Canadian man in Pennsylvania on suspicion of helping ShinyHunters. The Occasions story didn’t establish the person, nor did an announcement on Twitter/X in regards to the arrest from FBI Director Kash Patel.
One supply near the investigation advised KrebsOnSecurity the Canadian particular person arrested this week was visiting Pennsylvania for a cyber insurance coverage convention, and that the suspect’s firm specialised in dealing with ransomware negotiations with cybercrime teams. One other shared that management over the ShinyHunters investigation has been centralized at an FBI subject workplace in Texas.
A web-based search reveals the Cyber Threat Summit was held on the Loews Philadelphia Resort between Oct. 5 and Oct. 7. The convention had a number of sponsors, however in keeping with the summit’s web site its greatest sponsor was a Canadian safety firm known as Cypfer.
In accordance with LinkedIn, one in every of Cypfer’s “ex-founders” was Edward Dubrovsky, who’s now related to one other Canadian safety agency and sponsor known as CyberSteward. In a submit to LinkedIn roughly one month in the past, Dubrovsky stated he had plans to attend the Cyber Threat Summit with the remainder of the CyberSteward workforce.
[Update: Oct. 10, 9:58 a.m. ET: A spokesperson for Cypfer said Dubrovsky was not a founder or co-founder as his LinkedIn profile claims, but instead served as a managing director before resigning in November 2025].
Edward Dubrovsky’s LinkedIn profile.
“Wanting ahead to persevering with conversations round technique & compliant pushed coercive (ransomware, extortion) advisory, negotiations and settlement providers which are world and actually agnostic,” Dubrovsky wrote.
Federal courtroom data present that on October 8, an Edward Dobrovsky (observe the slight misspelling of the final title) was arrested in Pennsylvania on cyber extortion and conspiracy fees. A number of of these paperwork — together with the core criticism — at the moment are sealed. However a handful of them had been listed at Courtlistener.com, together with a abstract of the criticism, which fees the defendant with “conspiracy to threaten to impair the confidentiality of data with the intent to extort cash,” and “interference with commerce by threats.”
Picture: Courtlistener.com
The inmate locator on the U.S. Bureau of Prisons web site experiences {that a} 54-year-old Edward Dubrovsky is at present being held at a federal facility in Philadelphia. However the courtroom data listed by CourtListener embrace a discover filed on October 9 that moved the case to the Jap District of Texas, which sources say is now the epicenter of the FBI’s ShinyHunters investigation. The FBI declined to remark for this story.
Dubrovsky’s LinkedIn profile states he’s the creator of Cyber Extortion Strategic Response, a 252-page guide that guarantees to “take readers past the ransom observe and into the selections that decide how a company responds, recovers, and protects what issues.”
Edward Dubrovsky’s guide, which facilities on the intricacies of ransomware negotiations.
“On the coronary heart of the guide is a vital distinction: speaking with a felony will not be the identical as negotiating a fee, and negotiating will not be a dedication to pay,” reads an excerpt from the guide’s itemizing on Amazon. “Engagement can serve different aims, together with testing claims, gathering data, creating time, and preserving choices whereas the group evaluates its subsequent transfer.”
Mr. Dubrovsky couldn’t be instantly reached for remark. KrebsOnSecurity additionally sought remark from different executives at CyberSteward, and can replace this submit within the occasion they reply. The obtainable courtroom data in Dubrovsky’s case present that he doesn’t at present have an lawyer and has but to be appointed a public defender by the courts.
ShinyHunters sometimes makes use of phishing and stolen credentials to siphon knowledge from company accounts at software-as-a-service firms, after which threatens to publish the stolen knowledge on-line until a ransom demand is paid. In accordance with the FBI, the group has extorted greater than $70 million from victims up to now this 12 months.
Sources inform KrebsOnSecurity the FBI has been poring over units that had been seized final month when the Dutch police arrested the convicted cybercriminal Pepijn van der Stap in reference to the ShinyHunters investigation, and that fees towards principals at different firms focusing on ransomware negotiation could also be forthcoming.
Instantly after Van der Stap’s arrest, one other member of ShinyHunters named “Rey” assumed management over the group and started taunting the FBI over knowledge the group stole from the company’s on-line recruitment portal, which included every’s particular person’s unit and specialization, in addition to medical and psychiatric data.
Final week, Reuters reported that Rey — recognized as a teen named Saif Al-din Khader — had been detained and was cooperating with FBI investigators. On October 7, we detailed how Rey was apprehended because the cybercrime group allegedly sought to extort a navigation and digital aviation unit that was divested by Boeing in late 2025.
That is more likely to be a fast-moving story. Updates will probably be famous together with timestamps.
![11 social media tendencies each marketer ought to watch in 2026 [new data]](https://blog.aimactgrow.com/wp-content/uploads/2026/09/social20media20trends-1-120x86.png)
