Dutch police arrested a 24-year-old in the ShinyHunters probe days after hackers claimed they hit the FBI’s jobs portal.
Story Highlights
- Dutch National Police confirmed an arrest tied to the ShinyHunters investigation.
- The Federal Bureau of Investigation (FBI) said it is probing “unauthorized activity” affecting FBIJobs.gov.
- Multiple outlets say ShinyHunters claimed a breach and shared sample data with reporters.
- The FBI jobs portal was reported offline during the incident window.
Dutch Police Confirm Arrest In ShinyHunters Case
Dutch National Police said a 24-year-old Amsterdam man was arrested this month in an investigation into the hacker group known as ShinyHunters. Police issued the confirmation after days of global headlines about claims that the group breached systems tied to FBI hiring. Reports linked the suspect to prior cybercrime activity, though Dutch authorities did not publish charging documents with technical detail. The arrest marks a concrete step by European partners working with United States counterparts.
Journalists identified the suspect as Pepijn van der Stap in follow-on reporting based on prior convictions and open records, while official Dutch statements did not name him. Outlets framed the move as part of a wider push to disrupt a loose network that trades in stolen data and extortion. Because investigators have not released forensic exhibits, the public record does not yet show a direct evidentiary tie to the alleged FBI jobs-site breach.
FBI Confirms Probe; Hiring Portal Taken Offline
The Federal Bureau of Investigation said it is aware of claims of “unauthorized activity” affecting FBIJobs.gov and is investigating. The agency did not confirm the scope of any theft or the attack method. The Guardian reported the employment portal was offline during the review, which is typical containment after suspected misuse. That action suggests real disruption, even as the bureau withholds technical detail while it secures systems and interviews witnesses.
Reporters said the ShinyHunters brand took credit for the attack and circulated samples to newsrooms. Those samples appeared to match records formats used by federal personnel systems, according to coverage, but outlets did not trace the data directly to the FBI server in a way the public can verify. That leaves a gap between hacker boasts and confirmed government findings, which agencies often keep under wraps during active cases.
Claims, Capabilities, And The Attribution Challenge
Reuters and other outlets said ShinyHunters claimed it stole sensitive data about current and former FBI employees and applicants. The group has a record of large thefts and public pressure tactics, which makes its claims harder to dismiss out of hand. At the same time, the group reduced public chatter after initial statements. That pattern reflects a common cycle in cyber extortion: loud claims first, selective leaks next, then silence while negotiations or police pressure mount.
🚨 BREAKING: FBI and Dutch police arrest an alleged ShinyHunters leader after the claimed https://t.co/kd6VpqrFBq hack.
• Kash Patel: "one of the alleged leaders"
• More leads already flowing from the arrest
• Comes a week after the group bragged it stole FBI data — per Fox /… pic.twitter.com/Ibgm0DNxht— WATCHMAN 🚨 (@AppFserver) September 29, 2026
For conservative readers, two truths can sit side by side. First, law enforcement appears to be moving with purpose; the Dutch arrest shows international partners acting on leads. Second, America needs stronger, accountable cyber defense across government. Agencies must lock down cloud environments, verify third-party software, and publish plain-language after-action reports. Citizens deserve proof that the people hired to protect them can also protect their own systems without hiding behind vague press lines.
What Matters Now For Security And Accountability
Congress should seek briefings from the FBI on hiring-system controls and incident logging, including how fast access was cut and what data, if any, left the environment. Investigators should compare any leaked records with authoritative personnel databases to confirm source and scope. If PeopleSoft or other vendor software played a role, the vendors owe a timeline and patches. These steps will help move the story from hacker claims to verified facts and lasting fixes.
President Trump’s administration is now judged on outcomes. That means visible cooperation with allies, swift arrests, and clear remediation inside federal networks. It also means rejecting secrecy that hides weaknesses from taxpayers. A strong America defends its borders and its data. When criminals target our institutions, we expect the government to shut the door, show the receipts, and make sure it does not happen again. The Dutch arrest is a start, not the finish.
Sources:
cbsnews.com, thehackernews.com, theguardian.com
