Dutch police arrested a 24-year-old in a probe of the group that claimed it breached the FBI’s jobs portal, underscoring a high-stakes clash between cybercriminals and institutions tasked with protecting Americans.
Story Snapshot
- Dutch police confirmed an arrest in the ShinyHunters investigation.
- ShinyHunters claimed it stole massive FBI personnel and applicant data.
- The FBI said it is investigating “unauthorized activity” affecting FBIJobs.gov.
- The FBI jobs site was taken offline during the review, showing real disruption.
What Police And Reporters Confirmed So Far
Dutch National Police said they arrested a 24-year-old Amsterdam man this month in an investigation into the ShinyHunters hacking group, but did not publicly name him or detail the evidence. Reuters connected the arrest to past reports naming a suspect tied to prior cyber offenses, while noting the police statement itself stayed narrow on facts released to the public. The confirmation matters because it shows law enforcement pressure on a group that thrives on public claims and fear.
ShinyHunters told reporters they breached the Federal Bureau of Investigation’s systems through the FBI jobs portal, and said they stole data on almost all agents and applicants. Reuters reported those claims after the group posted messages online. The scale they described, in terabytes, would be one of the biggest law enforcement data thefts in memory if proven. But the group’s account remains a claim, not a completed public record with forensic proof.
What The FBI Has Said And Done
The Federal Bureau of Investigation (FBI) stated it is aware of claims of “unauthorized activity” affecting FBIJobs.gov and is investigating. The agency did not confirm theft of data or the hackers’ method. During the review, the FBI jobs portal was offline, which suggests a real operational impact even as details stayed under wraps. That cautious language is common in active probes and reflects security and privacy limits on what the bureau can share mid-incident.
Media reports say journalists received small data samples that looked like real FBI or Justice Department records. Those outlets did not confirm that the samples came straight from the FBI jobs systems. That gap leaves room for confusion, which hackers often use to shape the story in their favor. The group later reduced public chatter and hinted it might not release data, which also clouds verification in the short term.
How The Claimed Attack Would Have Worked
Coverage cites the group’s claim that it used an Oracle PeopleSoft flaw in the FBI jobs portal, then accessed servers hosted in a secure government cloud. Separate reports say FBI recruiting infrastructure uses PeopleSoft and Amazon Web Services GovCloud, which would match that claimed path if confirmed by forensics later. This does not prove the hack, but it shows why the claim drew serious attention from experts and the press.
Today, our partners at the Dutch National Police announced the arrest of one of the alleged leaders of ShinyHunters, a group linked to cyberattacks in the United States, the Netherlands, and around the world.
The Dutch High-Tech Crime Unit arrested the suspect under Dutch law.… pic.twitter.com/2xA35goGxn
— Parallel Polis in Exile 🇺🇸 (@Polis_in_Exile) September 30, 2026
ShinyHunters has a history of high-profile data theft and extortion, according to multiple outlets, which raises the stakes for any new claim. Still, experts describe the “ShinyHunters” name as a loose brand used by different actors over time. That makes it hard to tie any single person to one breach until police or courts share more. For Americans watching, this is another reminder that government systems can be targets, and that clear answers can take time.
Why This Matters For The Public
Cyberattacks test trust in the institutions that hold sensitive records. When hackers brag before evidence is public, the story can outrun the facts. When agencies stay quiet, the silence can feed doubt. Both sides have incentives that do not always align with public clarity. People on the left and the right already feel that big institutions protect themselves first. Incidents like this can deepen that belief unless officials provide prompt, useful updates grounded in facts.
What To Watch Next
Watch for court filings in the Netherlands that describe seized devices or communications. Look for any FBI or Justice Department notice to affected people, which would signal confirmed exposure. Keep an eye out for technical reports that tie logs, timestamps, and system details to a clear timeline. Until then, the confirmed facts are straightforward: one arrest in a ShinyHunters probe, an FBI investigation of claims about its jobs site, and a jobs portal that went offline while that review unfolded.
Sources:
cbsnews.com, foxnews.com, securityaffairs.com, theregister.com, nbcnews.com
