ShinyHunters claimed to have stolen sensitive files on every FBI employee, with sample files containing medical and psychiatric records. In its final communication before the site's collapse, the group stated it wanted no further escalation, which observers say could be read as the group backing down completely. Although Khader told a reporter in 2025 that he had quit the group, intrusions attributed to ShinyHunters continued into 2026.
Wednesday, October 21, 2026
Story
FBI Detains Second ShinyHunters Member in Netherlands
Cybersecurity17 days ago
The dark web site used by ShinyHunters went offline Wednesday as investigators worked to identify the collaborators in a breach of federal employee data. The operation includes the recent detention of an alleged group member in the Netherlands and the ongoing cooperation of Saif al-Din Khader, a key member detained in Jordan on Tuesday. Khader is currently walking FBI agents through his devices and messages to locate other group participants, and Kash Patel stated that more arrests are on the table.
Looking for more context or analysis?
Tilt chat provides reliable, tailored insights, alerts, and automations.