The ShinyHunters case is back in the spotlight after a new arrest was announced in the US. At the same time, court records indicate a Canadian cybersecurity consultant accused of extortion, but it has not been confirmed whether his case is linked to the FBI breach.
The timing has fueled reports of the same person being involved in the FBI recruitment portal case. However, the information available comes from different sources and US authorities have not confirmed that it concerns the same case.
What we know about the new arrest in the ShinyHunters case
On October 9, FBI Director Kash Patel announced that agents had arrested another suspected accomplice of the group. Patel identified the ShinyHunters group as the group believed responsible for the incident on the FBIJobs.gov website, without naming the arrestee, specifying the location of the arrest or stating any charges, according to Reuters.
The New York Times reported, citing two people familiar with the investigation, that the suspect is a Canadian citizen and was arrested in Pennsylvania. The same sources described him as a key accomplice in the invasion, but the newspaper noted that authorities had not released his name or specific charges.
Separately, KrebsOnSecurity reports that Canadian Edward Dubrovsky was arrested in Pennsylvania on October 8 and that court records charge him with conspiracy and racketeering. The reporter notes that in some court indexes the last name appears with a different spelling, as “Dobrovsky.”
Politico reports that Dubrovsky faces charges of conspiracy to commit racketeering and one count of hindering interstate commerce by threats. The indictment remains sealed. After his appearance in federal court in Philadelphia, a judge ordered the case transferred to East Texas.
According to the same report, prosecutors have requested his detention pending trial. However, the specific legal proceedings have not been publicly presented as a case of FBI misconduct. Politico notes that it is unclear whether the charges are related to the investigation that FBI leadership announced the same day.
KrebsOnSecurity the arrest to the ShinyHunters investigation. The same sources say Dubrovsky's company specialized in handling negotiations with ransomware groups. This information does not constitute official FBI confirmation of the new suspect's identity or the connection between the two cases.
The charges do not prove involvement in the FBI breach
The distinction is important because the FBI announced the arrest of an anonymous suspect, while the court report refers to a specific person and a sealed complaint. Until more information is available, it cannot be assumed that the two reports describe the same class of acts.
Neither the arrest nor the charges constitute proof of guilt. The court documents that have been made public include only a brief description of the offenses, while the main complaint remains confidential. Dubrovsky had not commented publicly on the case when the relevant reports were published.
The FBIJobs.gov breach is a separate part of the investigation. ShinyHunters claimed to have obtained employee and candidate data, while analysis of samples from the New York Times found personal information, addresses and sensitive job information. The FBI attributed the incident to a third-party platform that had not received a timely security update, BleepingComputer reports .
The group announced the breach in September and threatened further disclosures, but the exact scope of the data it obtained remains under investigation, BleepingComputer. The FBI director has said the agency is working with international authorities to track down those involved, according to Reuters.
See also: FBI calls on ShinyHunters members to surrender
What remains to be clarified in the ShinyHunters case
The case also highlights the sensitive position of professionals who help organizations manage ransom demands. The fact that a consultant had worked on negotiations does not in itself establish illegal activity; the charges relate to a specific alleged conspiracy and must be examined in court.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
Dubrovsky had publicly described the difference between communicating with criminals and paying ransoms, as KrebsOnSecurity. This contrast makes the case notable for the industry, but it does not prove that his professional services were related to the crimes attributed to him.
See also: FBI fires Accenture contractor after ShinyHunters breach
The next critical elements will be the unsealing of the complaint, the development of the detention, and any public clarification from the FBI on whether the court case is connected to the attack on FBIJobs.gov. Until then, the ShinyHunters case involves two parallel reports whose relationship to each other remains unclear.
See also: Dutch police arrest hackers in ShinyHunters investigation
