Key facts
- Dutch police arrested Pepijn van der Stap, a 23-year-old former cybercriminal, in connection with the hacker group ShinyHunters.
- Van der Stap was previously convicted in 2023 for data thefts and extortions.
- Following his arrest, ShinyHunters members escalated attacks, stealing data from the FBI and extorting the ransomware group Cl0p.
- Dutch authorities are seeking help identifying a ShinyHunters member involved in a data breach at Odido that affected 6.2 million individuals.
Dutch police have arrested Pepijn van der Stap, a 23-year-old former cybercriminal turned security professional, in connection with the hacker group ShinyHunters. Van der Stap, who was previously convicted in 2023 for data thefts and extortions that allegedly earned between €1.5 million and €2.7 million, was arrested on September 15 and is set to appear in court in Rotterdam. Following his arrest, members of ShinyHunters reportedly escalated their attacks, stealing sensitive data from the FBI and extorting the Russian ransomware group Cl0p. Dutch authorities are also seeking public assistance in identifying the voice of a ShinyHunters member who social-engineered their way into Odido, the nation's largest mobile telecommunications provider, in February 2026, leading to the theft of data on over 6.2 million Dutch individuals. ShinyHunters confirmed to NL Times that the suspect in the audio clip is a member of their collective and stated they provide full support to their members.