Dutch Police Arrest Man in ShinyHunters Investigation

Dutch police said they arrested a 24-year-old man from Amsterdam this month in an investigation into the hacking group ShinyHunters. Police have not publicly named the suspect or detailed the evidence, but said he is scheduled to appear before Rotterdam District Court on September 29, 2026. Three people familiar with the investigation identified the arrested man to journalist Brian Krebs as Pepijn van der Stap, according to reporting about the case. Police have not confirmed that identification. Van der Stap, 24, works as an offensive security lead at Dutch cybersecurity firm Neo Security, according to the reports. The arrest concerns an investigation into ShinyHunters, a group associated with data theft and extortion. Reporting has linked the inquiry to the February 2026 breach of Dutch telecommunications provider Odido, which ShinyHunters claimed. Authorities have not publicly confirmed that Van der Stap was involved in the attack or that he was the Dutch-speaking caller whose recorded voice police released while seeking help identifying a suspect in the Odido case. ShinyHunters denied that Van der Stap is associated with the group.