Washington — A senior member of the ShinyHunters hacking collective, identified as Saif al‑Din Khader, was taken into custody by Jordanian authorities earlier this week, according to three sources familiar with the case. The sources say Khader, who operates online under the nickname “Rey,” is now cooperating with the FBI and international law‑enforcement partners to locate the remaining members of the group.
Detention and cooperation
Khader was reportedly detained on Tuesday, though the exact circumstances of his arrest and his current location remain unclear. Reuters was unable to reach Khader or his family for comment. Two of the sources confirmed that he has agreed to assist the FBI in identifying other ShinyHunters operatives, a development the bureau described as “critical” to its ongoing investigation.
FBI response
The FBI declined to comment on any specific arrest abroad but reiterated that it “continues to aggressively investigate the recent cyber incident allegedly involving ShinyHunters, having already worked with partners to arrest multiple subjects — and we will spare no resource in bringing each of the responsible individuals to justice.” The agency’s statement underscores a broader effort to disrupt the group’s activities, which have drawn comparisons to the 2015 Office of Personnel Management breach linked to Chinese actors.
ShinyHunters background
ShinyHunters is believed to be a loosely organized network of young, English‑speaking hackers focused on data theft and extortion. The group claims to have exfiltrated massive amounts of information on every FBI employee, a claim that, if verified, would represent one of the most extensive breaches of federal personnel data in recent history. Experts note that the scale of the alleged theft rivals the 2015 OPM intrusion, which exposed sensitive details on millions of security‑cleared Americans.
Implications for national security
While the full impact of the alleged data theft remains under investigation, officials warn that the exposure of FBI employee information could pose significant security risks, potentially enabling adversaries to target law‑enforcement personnel. The cooperation of Khader is seen as a potential breakthrough, offering investigators insight into the group’s operational methods, infrastructure, and other participants.
International cooperation
The detention in Jordan highlights the importance of cross‑border collaboration in combating cybercrime. Jordanian authorities have a history of working with U.S. agencies on security matters, and this joint effort reflects a shared commitment to protecting critical government data from malicious actors.
Next steps
Law‑enforcement officials say the investigation remains active, with additional arrests expected as Khader provides further intelligence. The FBI has not disclosed a timeline for any forthcoming actions, but the agency emphasized that it will continue to allocate resources to dismantle the ShinyHunters network and safeguard federal information systems.
Original reporting: Appleton, WI News Feed (HLL/CB) — read the source article.
