Dutch police remanded a 24-year-old named as Pepijn van der Stap after the FBI warned ShinyHunters.

A foreign arrest and a remand order are process abroad. They are not a United States conviction. On Tuesday, Sept. 29, 2026, FBI Assistant Director Brett Leatherman said Dutch partners had arrested an alleged ShinyHunters leader tied to breaches of more than 140 organizations, and Dutch police said a 24-year-old Amsterdam man appeared in Rotterdam District Court and was held for at least 90 days. Reporting by Reuters, USA TODAY, TechCrunch, and Krebs on Security identifies him as Pepijn van der Stap.

Dutch police said an unnamed 24-year-old man from Amsterdam was arrested under Dutch law around mid-September on suspicion of participating in a criminal organization tied to ShinyHunters. On Tuesday, Sept. 29, 2026, he was due in Rotterdam District Court, and police said he was remanded into custody for at least 90 days. An arrest and a remand are custody decisions under Dutch law. They are not a finding of guilt in a U.S. courtroom.

The same day, FBI Assistant Director Brett Leatherman released a video warning to remaining ShinyHunters members after the Dutch arrest. He said the group had allegedly breached more than 140 organizations and taken at least $70 million in extortion payments, and he urged others to contact the bureau. FBI Director Kash Patel described the person arrested as one of the alleged leaders of ShinyHunters. Those are federal statements about an investigation. They are not a U.S. indictment naming van der Stap in open court.

Independent reporting by Krebs on Security, Reuters, USA TODAY, and TechCrunch identifies the arrested man as Pepijn van der Stap, 24, previously convicted in the Netherlands in 2023 for data theft and extortion under the handle Umbreon and later employed as offensive security lead at Neo Security. Dutch police also said investigators found information on his laptop about two murders that should be committed abroad, and that that strand is separate from the ShinyHunters case. ShinyHunters told TechCrunch that van der Stap has no association with the group. Naming in press reports, a prior conviction, and a separate murder-plot inquiry are not a verdict on the current ShinyHunters charges. All defendants are presumed innocent until proven guilty in a court of law.