Dutch police tie new arrest to ShinyHunters hacking probe

The case links a previously convicted Dutch hacker to the ShinyHunters inquiry while the group publicly denies any connection.

Dutch police say a 24‑year‑old man from Amsterdam arrested this month is being held as part of their investigation into the ShinyHunters hacking group, with a court appearance scheduled for September 29 at the Rotterdam District Court. Reporting by KrebsOnSecurity and DataBreaches identifies the suspect as Pepijn van der Stap, also known online as "Umbreon," a hacker who previously admitted to hacking and extorting more than a dozen companies and received a four‑year prison sentence with one year suspended and three years’ probation. DataBreaches reports that a tactical police unit detained him on September 15 at his Amsterdam home and seized electronic equipment, and that investigators are exploring a possible link between his old "Umbreon" persona and ShinyHunters’ recent use of the same Pokémon character in high‑profile attacks. Dutch police have also released an audio recording of a Dutch‑speaking suspect who social‑engineered an Odido help‑desk employee into surrendering credentials, though both DataBreaches and a friend of Van der Stap say the voice does not resemble his. A ShinyHunters representative told BleepingComputer that the group denies any association with Van der Stap.