Federal investigators are examining executives at ransomware negotiation firms for suspicious ties to the ShinyHunters hacking group, which recently breached FBI servers and stole sensitive personnel data. According to sources, one U.S.-based executive allegedly helped operate the ShinyHunters extortion website, which was active from May through October 2026 and featured nearly 100 victim organizations. The site pressured companies to pay ransoms by threatening to publish stolen files. Canadian cybersecurity executive Edward Dubrovsky was arrested in October in connection with the ShinyHunters investigation and charged with threatening to disclose stolen data and interfering with interstate commerce through extortion.
ShinyHunters, which has extorted over $70 million this year, was originally run by French cybercriminals but later came under control of a teenager from Jordan known as “Rey.” Investigators discovered that executives at negotiation firms had advance knowledge of ShinyHunters victims before the companies themselves learned of breaches. One executive allegedly knew about the FBI data theft but failed to report it to the agency before the group threatened to publish the stolen files. The findings highlight potential conflicts of interest within the ransomware negotiation industry, particularly when firms earn fees based on ransom amounts paid.
Source: Read the full story at Krebs on Security
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
