The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
The FBI says it and law-enforcement partners have arrested “multiple subjects” in an investigation into a September cyber incident allegedly involving ShinyHunters. The bureau has not disclosed a precise total or identified everyone covered by that statement. Separately reported arrests in the Netherlands and Jordan should not be treated as the FBI’s complete list.
How many people were arrested in the ShinyHunters FBI hack?
The FBI’s published count is “multiple.” In an email to The Register on October 5, 2026, an unnamed FBI spokesperson said the bureau had worked with partners to arrest multiple subjects. The FBI did not specify how many people that means or identify the particular arrests.
The spokesperson said: “The bureau continues to aggressively investigate the recent cyber incident allegedly involving ShinyHunters, having already worked with partners to arrest multiple subjects and we will spare no resource in bringing each of the responsible individuals to justice.” The wording confirms arrests in the investigation; it does not establish that every person arrested has been publicly named or that all arrests have been reported.
What is known about the FBIJobs.gov incident?
On September 23, the FBI said a cybercriminal enterprise group was claiming a compromise of fbijobs.gov and alleging that employee personally identifiable information had been affected. The bureau said it had not determined whether the breach point was a third party or the FBI’s enterprise. Its official statement dated September 23, 2026 said: “While the point of breach is still undetermined—whether a third-party or the FBI’s enterprise—we are actively and aggressively investigating this matter and working closely with those third-party providers that support fbijobs.gov to mitigate any and all risk.”
#1 Best Overall
Did ShinyHunters hack FBIJobs.gov?
The FBI’s public statement described the compromise as a claim under investigation and said the point of breach remained undetermined. ShinyHunters claimed it stole two to three terabytes of FBI- and Justice Department-related data and said it used a new Oracle PeopleSoft vulnerability. Those are the group’s claims, not findings confirmed by the FBI in the contemporaneous reporting.
CBS News reported that reporting based on portions of sample data had not established that the records came from FBI systems. The publicly available information cited here therefore does not establish the scale of any FBI-system data loss or verify the alleged PeopleSoft attack path.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What has been reported about arrests in the Netherlands and Jordan?
Netherlands: arrest before the FBIJobs.gov claim became public
CBS News reported that Dutch authorities arrested a 24-year-old in Amsterdam on September 15 on suspicion of membership in ShinyHunters. That was before the FBIJobs.gov claim was publicly reported. FBI Director Kash Patel described the person as “one of the alleged leaders.” CBS’s sources identified the suspect as Pepijn van der Stap, while Dutch police did not name him publicly in the report.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
CBS also quoted FBI Cyber Division Assistant Director Brett Leatherman as saying: “Since last year, this cybercriminal and his co-conspirators have allegedly breached more than 140 organizations and taken at least $70 million in extortion payments.” These are allegations about the person described as an alleged leader and his co-conspirators; they are not a measure of the FBIJobs.gov incident.
Rank #3
Jordan: detention reported by Reuters sources
Reuters, republished by Investing.com, reported on October 4 that Saif al-Din Khader, also known as Rey, had been detained in Jordan and was reportedly cooperating with investigators. Reuters said the FBI declined to comment on the specific arrest or activity abroad. These details are attributed to Reuters’ sources, not to a public FBI identification of Khader as one of the subjects in its “multiple” arrests statement.
Quick Recap
Best Value
What the FBI has and has not confirmed
| Detail | What is established in public reporting |
|---|---|
| Arrests in the investigation | The FBI told The Register on October 5, 2026, that it and partners had arrested “multiple subjects.” No precise total was provided. |
| Identity of everyone arrested | The FBI did not identify the people covered by its statement. The Netherlands and Jordan cases were reported separately by CBS and Reuters, respectively. |
| FBIJobs.gov breach point | The FBI said on September 23, 2026, that it remained undetermined whether the breach point was a third party or the FBI’s enterprise. |
| Data volume and PeopleSoft method | ShinyHunters claimed two to three terabytes of data and a new Oracle PeopleSoft vulnerability; CBS reported that the FBI had not verified the account. |
| Alleged group activity figures | Leatherman told CBS that the alleged leader and co-conspirators had allegedly breached more than 140 organizations and taken at least $70 million in extortion payments. These figures do not describe this incident. |
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
