Dutch Police Arrest Suspected ShinyHunters Member in Ongoing Investigation
Dutch authorities have confirmed the arrest of a 24-year-old Amsterdam man in connection with the notorious **ShinyHunters** hacking group. The suspect, identified as **Pepijn van der Stap**, also known online as "**Umbreon**," has a history of cybercrime and was reportedly still on probation from a previous hacking conviction.
Dutch police have confirmed the arrest of a 24-year-old Amsterdam man earlier this month as part of an investigation into the **ShinyHunters** hacking group.
"It is true that this month a 24-year-old man from Amsterdam was arrested in an investigation into the hacker group **ShinyHunters**," police stated on Monday.
The suspect is scheduled to appear before the Rotterdam District Court on Tuesday, September 29, where further details are expected to be released.
### Suspect Identified as Pepijn van der Stap
Sources including **KrebsOnSecurity** and **DataBreaches** have identified the suspect as **Pepijn van der Stap**, a Dutch hacker previously known by the online alias "**Umbreon**."
Van der Stap has a prior record, having been arrested in January 2023 and subsequently pleading guilty to hacking and blackmailing numerous companies globally. He received a four-year prison sentence, with one year suspended, followed by a three-year probationary period with specific conditions.
According to **DataBreaches**, his recent arrest occurred on September 15. A Dutch tactical police unit reportedly searched his Amsterdam residence and seized electronic devices.
### Potential Link to ShinyHunters
**KrebsOnSecurity** reports that sources close to the investigation are exploring a potential connection between Van der Stap and **ShinyHunters**. This link is partly based on his use of the "**Umbreon**" identity, a **PokΓ©mon** character also recently employed by **ShinyHunters** in high-profile incidents.
Notably, **ShinyHunters** used the **Umbreon** character in a recent alleged **FBI** breach and the defacement of the **Clop** ransomware gang's data leak site. Van der Stap was known to use the "**Umbreon**" alias and **PokΓ©mon** imagery on **BreachForums** as early as 2021.
However, the same **Umbreon** character also appeared in a 2020 defacement of the **HackForums** website, predating Van der Stap's known use of the alias by a year.
### Odido Hack Investigation and Voice Analysis
Dutch police previously released an audio recording of a Dutch-speaking man suspected of involvement in the **Odido** hack. In that incident, the suspect allegedly impersonated an IT department member to trick an **Odido** help desk employee into providing credentials and a verification code, granting unauthorized access to internal systems.
**DataBreaches**, which has communicated with Van der Stap on multiple occasions, noted that the voice in the recording did not match his. A close friend of Van der Stap reportedly reached the same conclusion.
When contacted for comment, a representative for **ShinyHunters** denied any association with Van der Stap. "That individual has no association with us. Frankly, we are laughing," the threat actor told BleepingComputer.
This is a developing story.
