Saif al-Din Khader, known as "Rey" and believed to lead the ShinyHunters extortion group, has been arrested in Jordan and is reportedly cooperating with the FBI to identify other members. Jordan confirmed the arrest without naming him — the identification comes from Reuters sources, who place the detention on September 29. The FBI has declined to comment on any arrest in Jordan.
Khader, a teenager from Amman, is also linked to the Scattered Lapsus$ Hunters group, where Brian Krebs placed him as a key member when he first named him in November 2025. Some reporting calls him ShinyHunters' leader; most call him a suspected member. Charges and extradition haven't been disclosed.
The arrest follows ShinyHunters hacking and defacing the FBI's jobs site, FBIJobs.gov, claiming to have stolen 2-3 terabytes of data including personal and health information of all current and former FBI employees. Last week, Dutch police arrested a 24-year-old Amsterdam man in the same investigation.
Dutch police and the FBI both declined to name the Amsterdam suspect, though independent reports point to Pepijn van der Stap, a convicted hacker on supervised release. The FBI says the man it arrested took part in hacking more than 140 organizations and collected at least $70 million in extortion payments. Krebs reported that Khader apparently tried to pin the FBI hack on van der Stap, planting a defacement image of Umbreon, van der Stap's old nickname. Patel says more arrests are "on the table."
Source: SecurityWeek
