Edward Dubrovsky has actually invested years informing business how to manage lawbreakers who take their information and need payment. Federal district attorneys now implicate the 54-year-old Canadian ransomware arbitrator of conspiring to devote cyber extortion himself, and confidential sources state his case is linked to ShinyHunters, the team that ruined the FBI’s tasks website last month and required the bureau withdraw a May cautioning about the hacking group.
According to the federal docket in Philadelphiawhich misspells his surname as “Dobrovsky,” Dubrovsky was apprehended in Pennsylvania on Thursday. The problem, which was submitted in the Eastern District of Texas and stays under seal, charges him with conspiracy to threaten to hinder the privacy of info with the intent to obtain cash, in addition to Hobbs Act extortion and conspiracy to dedicate Hobbs Act extortion. A magistrate judge in Philadelphia bought him held and sent him to Texas for a detention hearing. Dubrovsky hasn’t been founded guilty or gotten in a plea, and Politico reported that he might not be grabbed remark.
The general public filings state absolutely nothing about ShinyHunters or the FBI, and FBI Director Kash Patel didn’t call the suspect when he revealed a ShinyHunters-related arrest on Friday. “This is the current arrest this FBI has actually made in a matter of days including this network, as we work non-stop to take apart the group, pursue brand-new leads and proof, and act rapidly,” Patel composed on X.
Our representatives in the field have actually detained another believed co-conspirator of the ShinyHunters group– the group thought to be accountable for the current https://t.co/RG0D4I5KFS occurrence, which took place on a platform handled by a third-party supplier.
This is the current arrest …
— FBI Director Kash Patel (@FBIDirectorKash) October 9, 2026
2 individuals with understanding of the case informed the New York Times that Dubrovsky was apprehended on suspicion of lagging the breach that exposed delicate information on countless FBI staff members, which federal authorities see him as a primary co-conspirator in ShinyHunters’ attack on the bureau. CNN likewise connected the offender to the FBI hack through several individuals acquainted with the examination, and a police source informed CBS News the Canadian suspect is thought to be straight included.
Politico, nevertheless, reported that it’s uncertain whether Dubrovsky’s case is linked to the FBI hack, though it kept in mind that the timing of the 2 cases lines up. BleepingComputer likewise stated the sealed problem exposes what he supposedly did and whether his case is connected to the breach. The charges noted on the docket center on extortion instead of the invasion itself.
Who Is Edward Dubrovsky?
When Cypfer, a Toronto ransomware healing company, worked with Dubrovsky as a handling director in 2022, its news release explained a 30-year market veteran with CISSP, OSCP, and PMP accreditations and a seat on York University’s cybersecurity board of advisers. “Clients who have actually been the victims of ransomware require to get up-and-running as quickly as possible,” Dubrovsky stated in the release.
His LinkedIn profile calls him Cypfer’s chief running officer and an “ex-founder,” a label the business turns down. A Cypfer representative informed security reporter Brian Krebs that Dubrovsky was never ever a creator and worked as a handling director before resigning last November. He’s now related to CyberSteward, a ransom settlement company that lawsuits recognized as a brand name for Cypfer, according to Politico.
Dawg, I’m going to keep it 100 % with you. Never ever in a million years would I have actually anticipated a boomer Maple Syrupican to be an active member of an extortion group called after Pokemon https://t.co/4mNBHc9WnJ
— vx-underground(@vxunderground)October 10, 2026
Among Krebs’s sources stated Dubrovsky remained in Philadelphia for the Cyber Risk Summit, a cyber insurance coverage conference that ended the day before his arrest and counted Cypfer as its greatest sponsor.”Looking forward to continuing discussions around method & certified driven coercive(ransomware, extortion & )advisory, settlements and settlement services that are international and really agnostic,”Dubrovsky composed in a LinkedIn post about the occasion.
He has actually even shared a phase with the bureau now holding him: an InfraGard program from the RSA Conference in April 2025 lists him on 2 panels with representatives from the FBI’s San Francisco cyber branch.
On September 24th, 2 days after ShinyHunters went public with the FBI hack, Dubrovsky self-published Cyber Extortion Strategic Responsea guide to ransomware settlements.
The ShinyHunters FBI Jobs Site Hack
ShinyHunters’phony seizure banner increased on FBIjobs.gov on September 22nd. Within 2 days, outlets evaluating a dripped spreadsheet of approximately 5,000 supposed FBI authorities had actually discovered records that appeared to determine members of the FBI’s own hacking system. By September 29th, an internal memo examined by the New York Times was informing personnel to presume the worst.”We are running under the property that the risk star is likewise exfiltrating of all F.B.I. staff members,”the memo supposedly stated.
A day after Dutch cops revealed the arrest of a supposed ShinyHunters leader, whom Krebs recognized as founded guilty cybercriminal Pepijn van der Stap, FBI Cyber Division Assistant Director Brett Leatherman published a video resolved to the group’s staying members.” Arrests have a method of altering who wants to talk, and took facilities has a method of revealing us who’s left, “Leatherman stated. Van der Stap had actually been jailed around September 15thbefore the FBI hack, and the group has actually rejected any association with him. ShinyHunters has actually given that strolled back its indicated danger to release the information.
Jordanian authorities then apprehended Saif al-Din Khader, a thought member referred to as”Rey,”who is apparently complying with the FBIOn Monday, the bureau informed The Register it had actually dealt with partners to detain”numerous topics. “Leatherman likewise blamed a specialist who stopped working to use a security spot to a third-party platform. “As such, the FBI has actually gotten rid of the specialist and taken all needed actions to both alleviate any more danger and safeguard our labor force, “he stated in a declaration reported by ABC News
The ShinyHunters name has actually been connected to information breaches because a minimum of 2018, and the group has actually assisted other hackers obtain their victims as a service, according to BleepingComputerLeatherman has stated the group breached more than 140 companies and obtained$70 million considering that in 2015, the New York Times reported.
In August 2025, ShinyHunters was connected to a wave of Salesforce database attacks that swept up Workday. In December, it utilized information from a breach of analytics supplier Mixpanel to obtain Pornhub over Premium users ‘seeing histories. A single voice phishing contact March offered it approximately 900,000 records from identity security company Aura, which it disposed online when Aura declined to pay. In May, trainees logging into Canvas throughout finals week discovered a ShinyHunters ransom note where their control panels must have been.
Another Ransomware Fixer Charged
The day before Dubrovsky’s arrest, Zohar Pinhasi, owner of Florida-based MonsterCloud, was arraigned in Brooklyn on wire scams charges in an unassociated case. District attorneys declare his company billed victims for a decryptor it didn’t have and silently paid the hackers rather. They state numerous business paid MonsterCloud more than $19 million while Pinhasi paid cybercriminals more than$8 million in ransoms. He pleaded innocent.
The closer parallel is Angelo Martino, a previous DigitalMint ransomware mediator who pleaded guilty in April to dealing with the BlackCat/ALPHV ransomware gang. The opponents paid Martino for his customers’ personal working out positions, and he partnered with 2 other cybersecurity employees to release BlackCat versus more victims, consisting of one obtained for about$1.2 million in bitcoin. DigitalMint stated it fired the staff members included.
In July, Martino was sentenced to 70 months in jail for conspiring to hinder interstate commerce through extortion, the very same Hobbs Act statute pointed out in Dubrovsky’s grievance. Sources informed Krebs that the FBI has actually been sorting through gadgets took when van der Stap was apprehended in the ShinyHunters examination, which principals at other ransomware settlement business might quickly deal with charges.
Discover more from PMN S.P.O.R.T.S - A PRIME MEDIA NETWORK BRAND
Subscribe to get the latest posts sent to your email.
