Krebs: feds suspect a US consulting executive helped run ShinyHunters' extortion site

What is reported

Krebs on Security writes that shinywire[.]com was active from about 3 May to 16 October 2026, listed nearly 100 hacked organizations, and threatened to publish stolen data after seven days. Everything about the suspect comes from anonymous sources: an unnamed executive at a consulting firm with 1,000+ associates. Canadian security executive Edward Dubrovsky was arrested on 9 October on extortion-related charges but is not identified as the operator. Cypfer denies prior knowledge of his arrest.

Krebs also reports ShinyHunters hacked fbijobs.gov in late September, and the FBI says the group has extorted over $70 million this year.

A sourced leak about an unnamed suspect is the weakest link

A commenter who works in incident response and has dealt with negotiators said the profession is mostly legitimate, which is what makes the allegation corrosive:

"Most of them are extremely professional and worth their weight in gold for what they provide to their clients."

Another reader asked what a negotiator would gain from colluding. A commenter reasoning from reading about the trade answered with trust rather than price:

"why believe a hacker that if you pay they will actually leave you alone. But a legitimate middleman with a history of dealing with these things… can establish immediately confidence that paying will result in data recovery."

A commenter citing Wen Ho Lee and Richard Jewell warned that this kind of law-enforcement leak has misidentified people before. With no name, no charge and a single anonymous account, the trade's trust model is established; the claim about one executive is not.