Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesiTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Reuters reported on October 3, 2026, that Jordanian authorities detained Saif al-Din Khader, whom sources described as a suspected ShinyHunters member known by the alleged hacker nickname “Rey.” Two sources told Reuters that Khader was helping the FBI and international law-enforcement agencies locate other hackers. The FBI has not publicly confirmed Khader’s identity, detention, or cooperation, and the circumstances and location of his custody were not known when Reuters published its report.
Who is Rey, the ShinyHunters hacker reportedly detained in Jordan?
Reuters identified the person as Saif al-Din Khader and described “Rey” as his alleged hacker nickname. The account of his detention came from three people familiar with the matter, rather than a public announcement by Jordanian authorities or the FBI. Two sources said he was taken into custody on Tuesday, September 29. Reuters said it could not immediately determine how the detention occurred or where he was being held. (Reuters, October 3, 2026)
Two of Reuters’ sources said Khader was helping the FBI and international law-enforcement agencies find other hackers; one said he was walking investigators through his devices and digital correspondence. The FBI declined to comment on a specific arrest or overseas activity. Its statement said it was aggressively investigating the recent incident allegedly involving ShinyHunters and had worked with partners to arrest multiple subjects. That wording does not publicly identify Khader or confirm his reported cooperation. (Reuters, October 3, 2026)
Is Rey the same person arrested in the Netherlands?
No. The Dutch arrest publicly announced by the FBI involved a different alleged ShinyHunters member. CBS identified that suspect, based on sources, as Pepijn van der Stap, a 24-year-old from Amsterdam. Dutch police arrested him on September 15, 2026, under Dutch law; the FBI announced the arrest on September 29. The detention therefore happened before ShinyHunters’ FBIJobs.gov claims emerged on September 22–23, even though the public announcement came afterward. (FBI, September 29, 2026; CBS, September 23, 2026)
#1 Best Overall
| Detail | Jordan report | Dutch arrest |
|---|---|---|
| Person | Saif al-Din Khader, reportedly known as Rey; Reuters attributes the identification to sources familiar with the matter. (Reuters, October 3, 2026) | Pepijn van der Stap, according to CBS sources; described as a 24-year-old from Amsterdam. (CBS, September 23, 2026) |
| Country and authority | Jordanian authorities reportedly detained Khader. Specific circumstances and formal legal status were not stated in the reporting. (Reuters, October 3, 2026) | Dutch police arrested van der Stap under Dutch law. (FBI, September 29, 2026) |
| Detention and announcement | Two sources said the detention occurred Tuesday, September 29; Reuters reported it October 3. (Reuters, October 3, 2026) | Arrested September 15; publicly announced by the FBI on September 29. (CBS, September 23, 2026; FBI, September 29, 2026) |
| What is publicly established | Reuters’ sources reported detention and cooperation; the FBI declined to comment on a specific overseas arrest. (Reuters, October 3, 2026) | The FBI publicly credited Dutch police with arresting an alleged ShinyHunters leader. (FBI, September 29, 2026) |
Was the FBI data breach confirmed?
ShinyHunters claimed it compromised FBIJobs.gov and stole information relating to FBI and Justice Department personnel and applicants. On September 23, CBS reported that the FBI was aware of claims of unauthorized activity affecting the jobs website and was investigating; the bureau said the breach point had not yet been determined. ShinyHunters’ reported claim of two to three terabytes of data was not verified by the FBI. (CBS, September 23, 2026)
CBS reported that portions of samples supplied to media appeared to correspond to real FBI or Justice Department personnel, but their origin had not been established. Reuters later reported that its analysis of a sample shared by ShinyHunters found extensive personally identifying information, sensitive job-role details, and psychiatric and medical information. That analysis describes the sample Reuters examined; it does not establish the provenance of the material, validate every record, or confirm the group’s claimed total volume. (CBS, September 23, 2026; Reuters, October 3, 2026)
What has the FBI said about ShinyHunters?
In its September 29 announcement of the Dutch arrest, FBI Cyber Division Assistant Director Brett Leatherman said the suspect and co-conspirators had allegedly breached more than 140 organizations since the previous year and taken at least $70 million in extortion payments. Those are allegations attributed to Leatherman, not independently audited totals or a court finding. (FBI, September 29, 2026)
Leatherman also said the group often targets third-party vendors in cloud-based platforms, stealing sensitive data and threatening to publish it unless victims pay. This describes the FBI’s stated view of the group’s alleged tactics; it does not establish how the FBIJobs.gov incident occurred. (FBI, September 29, 2026)
Rank #3
What is still unknown about Khader’s detention?
As of Reuters’ October 3 report, public reporting had not established the circumstances of Khader’s detention, his custody location, whether Jordanian authorities had filed charges or begun proceedings, or whether he had been charged in connection with the alleged FBI incident. The FBI had not directly confirmed his identity or cooperation. Nor had the full scope and source of the data claimed by ShinyHunters been established. (Reuters, October 3, 2026; CBS, September 23, 2026)
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What should people do if they receive a ShinyHunters-related demand?
The FBI’s May 2026 IC3 advisory warns that actors may use the ShinyHunters name and that some claims may be exaggerated or used as pressure tactics. Its general guidance is to verify unusual requests through known channels, not to pay or respond to demands, and to report suspected activity. This advice does not mean that any particular person’s information was affected by the FBIJobs.gov claims. (FBI IC3 advisory, May 2026)
Quick Recap
Best Value
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
