The investigation against ShinyHunters in the Netherlands has unexpectedly transcended the boundaries of conventional cybercrime. Following the apprehension of a 24-year-old Amsterdam resident, police scrutinized his laptop. They discovered chilling intelligence concerning two prospective murders destined to occur abroad. Consequently, investigators suspect the man may have orchestrated both sinister plots.
Authorities originally detained the suspect on September 15 in connection with the ShinyHunters syndicate. They charged the man with active participation in a criminal enterprise. During the operation, police confiscated multiple data storage devices, which forensic experts are currently analyzing. On September 29, the Rotterdam court extended his pre-trial detention for an additional 90 days, and investigators have explicitly refused to rule out further arrests.
The Dutch Team High Tech Crime Takes the Lead
The elite Dutch Team High Tech Crime division is spearheading the investigation. Law enforcement officially classifies ShinyHunters as an extortionist hacking collective. Authorities have inextricably linked this group to massive data breaches affecting Odido, Pornhub, and Ticketmaster. Intriguingly, authorities do not consider the detained individual a suspect in the separate investigation regarding the Odido breach, which compromised the personal data of millions of telecommunications customers.
The specific date of the arrest warrants critical attention. The man has remained in custody since September 15. However, the ShinyHunters moniker continued surfacing in fresh cyberattacks. By September 28, reports emerged of a new wave of incursions targeting PeopleSoft, impacting organizations across multiple industries. Therefore, the apprehension of a single alleged participant cannot presently be interpreted as the cessation of the entire syndicate’s operations.
From Cyber Extortion to Assassination Plots
The most egregious facet of this evolving case materialized only after the initial arrest. Official police reports regarding the detained suspect indicate that an extensive volume of information concerning two intended extraterritorial murders resided on the laptop. Investigators perceived concrete indications that the suspect may have been issuing explicit directives for these assassinations. Formally, authorities now suspect the man of attempting to solicit two murders.
The police emphatically stress that these alleged assassination plots possess no connection to the broader ShinyHunters investigation. Investigators continue to meticulously analyze the seized electronic devices. They have abstained from disclosing supplementary details regarding these violent episodes. Ultimately, formal judicial proceedings must definitively establish the detainee’s involvement in both the hacking syndicate’s activities and the alleged murderous conspiracies.
The Resiliency of the ShinyHunters Brand
ShinyHunters has already endured severe pressure from international law enforcement agencies. By the summer of 2026, authorities had linked five distinct arrests and the shuttering of several underground marketplaces to the group’s infrastructure and immediate periphery. Nevertheless, perpetrators persistently utilized the notorious name in subsequent extortion campaigns.
One of the most consequential episodes of the year involved a devastating attack on the Canvas educational platform. The potentially compromised dataset was linked to the records of approximately 275 million individuals. Subsequently, Instructure, the platform’s proprietor, announced a formal agreement with ShinyHunters, confirming they had received verification that the stolen information had been permanently expunged.
Support Our Threat Intelligence
If you find our technology report and cybersecurity news helpful, consider supporting our work.
Buy Me a Coffee
PayPal
