FBI Arrests Canadian Cybersecurity Expert Edward Dubrovsky in ShinyHunters Investigation
We will continue to work closely with our partners to disrupt what’s left of the ShinyHunters group and their associates, no matter where they operate,
FBI Director Kash Patel stated on social media. Federal authorities have arrested 54-year-old Canadian cybersecurity executive Edward Dubrovsky over suspected connections to the criminal hacking group ShinyHunters, according to reports by CBC News and Reuters.
The arrest follows a high-profile cyberattack on FBIjobs.gov, which exposed a trove of sensitive data regarding agency staff, including job roles, specializations, and medical records. Filings from the U.S. District Court for the Eastern District of Pennsylvania indicate that Dubrovsky is charged with two criminal counts: conspiracy to threaten to impair the confidentiality of data with the purpose of extortion, alongside interference with commerce by threats. The allegations have not yet been proven in court.
Shock Within the Cybersecurity Community
Members of the international security sector expressed surprise upon learning of the detention of a prominent figure known for handling ransom negotiations. Ritesh Kotak, a Toronto-based tech and cybersecurity analyst, told CBC News that Dubrovsky was widely recognized and frequently spoke at industry conferences. Kotak emphasized that the charges remain allegations and that the exact circumstances of the case are still unclear.
Court records from Pennsylvania contain conflicting spellings of the suspect’s last name as Dobrovsky or Dobrosky, omitting his age, profession, and employer. However, prison records confirm that a 54-year-old Edward Dubrovsky is being held at a federal detention center in Philadelphia. Furthermore, dark-web intelligence organization District 4 Labs preserved leaked 2010 electronic wallet logs that point to Dubrovsky living in the Toronto suburb of Richmond Hill, as noted by Reuters.
Extortion Negotiations and Industry Background
Dubrovsky’s professional profile highlights a decades-long career specializing in cyber extortion management and negotiating with ransomware actors. According to KrebsOnSecurity, he previously served as chief operating officer for Cypfer from May 2022 until November 2025, though his online profiles also link him to CyberSteward, another firm providing emergency incident response. Last month, Dubrovsky published a book titled Cyber Extortion Strategic Response, detailing how organizations should handle digital ransom demands.
In the introduction of his book, Dubrovsky wrote about his experience dealing with threat actors: I have negotiated with criminals who viewed themselves as martyrs, criminal masterminds, and patriots of their own countries even after deploying malware against critical infrastructure and causing billions of dollars in damage.
ShinyHunters Extortion Campaign and Federal Response
Federal investigators allege that ShinyHunters has breached more than 140 organizations since 2025, extorting approximately $70 million. David Shipley, CEO of Fredericton-based Beauceron Security, told CBC News that targeting federal law enforcement effectively poked the bear
and unleashed an intensive international investigation.
The FBI inquiry has resulted in several other international arrests. Dutch authorities detained Pepijn Van der Stap in mid-September, while a teenager known as Rey
(identified in reports as Saif al-Din Khader) was arrested in Jordan and is currently cooperating with global law enforcement agencies to track down remaining members of the extortion syndicate, according to Reuters.
Frequently Asked Questions
Where is Edward Dubrovsky currently being held?
Prison records indicate that 54-year-old Edward Dubrovsky is being held at a federal detention center in Philadelphia, Pennsylvania, awaiting further court hearings.
What specific charges has the U.S. government filed against him?
Based on court papers originating from the U.S. District Court for the Eastern District of Pennsylvania, the federal government is prosecuting him on two counts: conspiracy to threaten to impair the confidentiality of data with the intent to extort, and interference with commerce via threats.
Which hacking group is tied to the federal investigation?
The arrests are connected to the cybercriminal collective known as ShinyHunters, which claimed responsibility for breaching the FBI’s job portal and exposing sensitive personnel data.
Related reading