Edward Dubrovsky, a Canadian cybersecurity executive, was arrested by the FBI in Pennsylvania on federal extortion charges linked to the ShinyHunters hacking group.
A Canadian cybersecurity expert specializing in ransomware response has been arrested by the Federal Bureau of Investigation (FBI) in connection with an investigation into the hacking group ShinyHunters. The suspect, identified by multiple media outlets as Edward Dubrovsky, was taken into custody in Pennsylvania while attending a conference.
Dubrovsky, 54, was arrested on Thursday in the Philadelphia area, according to federal court documents cited by Reuters and other outlets. FBI Director Kash Patel announced on Friday that agents had arrested "another suspected co-conspirator of the ShinyHunters group," though he did not publicly name the individual.
"This is the latest arrest this FBI has made in a matter of days involving this network, as we work non-stop to dismantle the group, pursue new leads and evidence, and act quickly," Patel stated. He added, "We will continue to work closely with our partners to disrupt what’s left of the ShinyHunters group and their associates, no matter where they operate."
Court records, which spell the suspect's name as Dobrovsky, list charges of "conspiracy to threaten to impair the confidentiality of information with the intent to extort money" and "interference with commerce by threats." The case has been moved to the Eastern District of Texas, where the FBI’s ShinyHunters probe is reportedly being run. A federal court order directed the U.S. Marshals Service to transport the defendant to Texas for further proceedings.
The arrest is linked to a recent incident involving the FBI’s jobs website, FBIJobs.gov. ShinyHunters claimed to have accessed the site and other systems, allegedly obtaining information on nearly all agents and job applicants. The FBI attributed the intrusion to a contractor’s failure to patch vulnerable Oracle PeopleSoft software.
Dubrovsky is affiliated with CyberSteward, a Toronto-based firm that offers ransomware negotiation services. His LinkedIn profile lists him as an executive at North American cybersecurity companies and identifies him as the author of a book titled "Cyber Extortion: Strategic Response." The Royal Canadian Mounted Police confirmed to CBS News that it is aware of the arrest of a Canadian in the United States in connection with ShinyHunters.
This arrest marks the third detention of a suspected ShinyHunters member in recent weeks. Authorities arrested one alleged key member in the Netherlands on September 15. Another alleged key member was reportedly arrested in Jordan on September 28 and is cooperating with the FBI.
ShinyHunters has been responsible for several high-profile data breaches this year, including attacks on healthcare and public sector entities. In July, the group was linked to a hack on DentaQuest, affecting roughly 15 million victims. In August, ShinyHunters claimed to have taken records on "tens of millions" of patients from pharmaceutical distributor McKesson, stating it had taken more than 284 million individual documents. The group also claimed responsibility for a breach at medical device company Medtronic in April.
The arrest highlights the FBI's intensified efforts to dismantle the ShinyHunters network following high-profile breaches of sensitive government and corporate data. While the FBI has not publicly confirmed Dubrovsky's specific role, sources told cybersecurity blogger Brian Krebs that executives at other firms offering ransomware negotiation services could face charges in this case. The investigation continues as authorities pursue leads related to the group's operations and infrastructure.
Sources
This article was drafted with AI assistance and checked against the sources above. Company claims are reported as claims. Cover image is AI-generated.
The day's checked news, by email
One short email a day with the top stories. Free, and you can unsubscribe in one click.
Or follow for the latest news:
Panama has recorded more than 200 aftershocks following a 7.7-magnitude earthquake that injured at least 27 people and damaged nearly 900 homes. The government declared a national state of emergency to allocate relief funds.
Saudi Arabia's energy minister promised a serious response after Houthi attacks on Riyadh airports killed multiple people. International airlines suspended flights as the conflict escalated.
