FBI urges ShinyHunters affiliates to surrender after Dutch police arrest

The Federal Bureau of Investigation has issued a public warning to members of the ShinyHunters extortion group, urging anyone involved to voluntarily turn themselves in following the recent detention of a suspected leader by Dutch law enforcement.

ShinyHunters, a loosely organized network of cybercriminals, has built a reputation for deploying ransomware and extortion tactics that threaten to release stolen data unless victims pay a fee. Over the past few years the group has targeted a range of entities, from small businesses to larger corporations, leveraging public leaks to pressure payment.

According to Dutch police, the individual apprehended was identified as a key figure within the organization, allegedly coordinating attacks and managing the group’s ransom demands. The FBI, which has been monitoring ShinyHunters’ activities for some time, confirmed that the suspect is believed to be one of the group’s leaders, though formal charges have not yet been announced.

In a statement released by the FBI, officials emphasized that cooperation with authorities could mitigate potential sentencing. "We encourage anyone who knows they have been involved with ShinyHunters to come forward voluntarily," the agency said, noting that early surrender may be viewed favorably during any future prosecution.

The development reflects a growing trend of transnational collaboration against cybercrime. Agencies in the United States and Europe have increasingly shared intelligence, leading to a series of high‑profile arrests of ransomware operators. The ShinyHunters case underscores how coordinated efforts can disrupt the leadership structures that enable these illicit campaigns.

Law enforcement experts say the warning may prompt additional defections from the group, potentially weakening its operational capacity. As investigators continue to unravel the network’s hierarchy, further arrests are anticipated. Companies that have previously been targeted are advised to review their security protocols and consider reporting any extortion attempts to both local authorities and federal agencies.