A teenager from Amman, Jordan suspected of leading ShinyHunters, a prolific data theft and extortion group, has been detained and is cooperating with the FBI to identify other gang members, according to KrebsOnSecurity.
The suspect, known by the hacker handle "Rey," was arrested while ShinyHunters was actively extorting a business unit that Boeing recently divested. The timing created an unusual connection. Rey's father works for Royal Jordanian Airlines, which operates Boeing aircraft.
ShinyHunters operated as a data theft and extortion operation, targeting organizations and demanding payment in exchange for not releasing stolen information. The group built a reputation for conducting high-volume breaches and extortion campaigns against multiple victims.
The detention of the suspected leader represents a significant disruption to the group's operations. By cooperating with FBI investigators, the teenager has begun providing information about other ShinyHunters members, potentially exposing the organizational structure and methods of the hacking collective.
The arrest occurred during an active extortion campaign, suggesting law enforcement moved to apprehend the suspect before the scheme against the Boeing spin-off could conclude. KrebsOnSecurity's reporting indicates this was not a cold case investigation but rather an ongoing action against an active threat actor.
The case highlights how law enforcement agencies continue pursuing prominent cybercriminal figures, particularly those leading organized extortion operations. The cooperation of a detained suspect with federal authorities can accelerate investigations into larger criminal networks and provide valuable intelligence on operational tactics and member identities.