BleepingComputer reported on 10 October that Edward Dubrovsky, 54, was arrested in Pennsylvania. He is a Canadian security executive and co-founded CYPFER, a firm that helps breach victims negotiate extortion payments. Politico and KrebsOnSecurity said he was at a cybersecurity conference there. Court records show he was moved to the Eastern District of Texas, where the charges were filed. An order says he is still in custody. The docket lists conspiracy to threaten data exposure to get money, and extortion by threats.
The complaint is sealed, so it is unclear what Dubrovsky is accused of doing. It is also unclear whether the case connects to the ShinyHunters hack of the FBI jobs portal. FBI Director Kash Patel announced the arrest of another suspected ShinyHunters co-conspirator a day earlier. BleepingComputer said the FBI has not confirmed Dubrovsky is that person. KrebsOnSecurity said multiple sources tied his arrest to the ShinyHunters case. The charges are allegations.
BleepingComputer describes ShinyHunters as a group that steals data from web apps and cloud software, then demands ransom. It says the group often gets in with stolen logins, access tokens, phishing and social engineering. That describes the group's usual methods, not what the Dubrovsky complaint alleges. The FBI says the group and its partners breached more than 140 organizations and collected over $70 million in a year. Buyers of cloud software may want to ask vendors how they protect logins and tokens.