Dutch authorities have arrested a 24-year-old man in Amsterdam suspected of being a high-ranking member of the ShinyHunters hacking collective. The arrest, which occurred on September 15, 2026, has introduced a significant timeline anomaly regarding the group’s recent activities, as the suspect was already in custody when ShinyHunters claimed responsibility for a high-profile breach of the FBI’s infrastructure.
According to the Dutch National Police, the suspect—identified as Pepijn van der Stap—was apprehended following a joint operation involving the FBI and the Dutch High-Tech Crime Unit. Van der Stap, who has long been associated with the online handle “Umbreon,” is currently being held in isolation and has been ordered into a 90-day pretrial detention period.
The Timeline Anomaly
The timing of the arrest complicates the narrative of the group’s most recent exploits. On September 22, 2026—one week after van der Stap was taken into custody—ShinyHunters publicly claimed to have defaced the FBI’s jobs portal and exfiltrated sensitive data belonging to federal agents and job applicants. The fact that the group’s alleged leadership was already in a Dutch jail cell at the time of the announcement suggests that either the breach was executed earlier than reported, or that the group maintains a resilient operational structure capable of continuing attacks while key members are incarcerated.
FBI Director Kash Patel confirmed that the arrest was part of a coordinated international effort to target the leadership of the group. ShinyHunters has previously been linked to a series of data thefts and extortions.
Murder Solicitation Allegations
While the initial investigation focused on cybercrime, Dutch authorities reportedly uncovered evidence of much more severe offenses. Analysis of van der Stap’s laptop following the arrest led investigators to suspect he was involved in the attempted solicitation or incitement of two murders abroad. According to a Reuters report, these charges are being handled as a distinct legal matter from the hacking allegations.
Van der Stap is not a newcomer to the criminal justice system. He was previously convicted in 2023 for his role in a series of data thefts and extortions. Despite that conviction, he allegedly continued his involvement with ShinyHunters, a group known for its aggressive tactics.
The Dutch National Police and the FBI have not yet detailed the specific volume of data allegedly exfiltrated during the FBI jobs portal breach or whether any of that data has been successfully recovered. For now, the suspect remains in strict isolation, a measure typically reserved for high-risk detainees to prevent them from communicating with outside associates or tampering with digital evidence.
