Canadian Ransomware Negotiator Arrested on Extortion Charges Amid ShinyHunters Probe

Edward Dubrovsky, a 54-year-old Canadian cybersecurity executive and ransomware-response negotiator, was reportedly arrested in the Philadelphia area on federal charges involving extortion-related conspiracy and interference with commerce. Reports said he was visiting for a conference. His underlying case in the Eastern District of Texas remains sealed, leaving the specific alleged conduct unclear. Dubrovsky was ordered detained pending a hearing in Texas, with a subsequent order directing the U.S. Marshals Service to transport him there. The New York Times and Brian Krebs reportedly identified him as a suspected ShinyHunters co-conspirator whose arrest FBI Director Kash Patel announced, but authorities have not publicly confirmed that identification or a connection between Dubrovsky’s charges and the hacking investigation.

The ShinyHunters investigation involves an intrusion affecting FBIjobs.gov on a third-party-managed platform. According to SecurityWeek, the FBI attributed the intrusion to a contractor’s failure to patch vulnerable Oracle PeopleSoft software. ShinyHunters claimed it obtained information on nearly all FBI agents and job applicants; the supplied reporting does not establish that claim’s accuracy or the breach’s full scope. The arrest announcement follows two other recent arrests of alleged ShinyHunters members, and the group’s Tor-based website appeared inaccessible when SecurityWeek published its report. The incident highlights third-party patching exposure, while the sealed proceedings leave the alleged role of the ransomware negotiator unresolved.