560/69 Monday, October 12, 2026
Edward Dubrovsky, a 54-year-old Canadian cybersecurity executive, was arrested in Pennsylvania, United States, in a case reportedly connected to the FBI’s ongoing investigation into the ShinyHunters group. Dubrovsky previously held senior positions at cybersecurity companies that assisted victims of data breaches and ransomware attacks with ransom negotiations involving cybercriminals. FBI Director Kash Patel had earlier stated that authorities had arrested “another alleged co-conspirator of the ShinyHunters group,” while The New York Times reported that the suspect was a Canadian citizen arrested in Pennsylvania and believed to be a key co-conspirator in the attack on the FBI Jobs Portal linked to ShinyHunters.
Reports from Politico and KrebsOnSecurity stated that Dubrovsky was arrested while attending a cybersecurity conference in Pennsylvania. Court records indicate that he appeared before the U.S. District Court for the Eastern District of Pennsylvania following his arrest, before being ordered transferred to the Eastern District of Texas, where the charges were filed, and he remains in custody. The criminal complaint is still under seal, but docket information lists charges related to conspiracy and extortion, including conspiracy to threaten the confidentiality of information with intent to extort money, Hobbs Act extortion, and conspiracy to commit those offenses. However, the FBI has not officially confirmed that Dubrovsky is the individual referred to as the ShinyHunters-linked suspect.
Dubrovsky previously co-founded a Canadian cybersecurity company named CYPFER and has been associated with CyberSteward, a company providing ransomware negotiation and cyber extortion response services. Reports indicate that CyberSteward is a trade name used by CYPFER and has assisted organizations in negotiating or, in some cases, facilitating payments to cybercriminals. ShinyHunters is an extortion group with a history of stealing data from web applications and cloud-based SaaS platforms before demanding payment from victims. More recently, the group has increasingly targeted cloud environments and enterprise SaaS services through stolen credentials, authentication tokens, phishing, and social engineering. The FBI stated that ShinyHunters and associated actors have compromised more than 140 organizations and received over USD 70 million in extortion payments during the past year. However, because the criminal complaint remains sealed, it is still unclear what specific actions Dubrovsky is accused of committing or whether the case is directly connected to the FBI Jobs Portal incident.