{"id":930990,"date":"2026-10-13T03:10:11","date_gmt":"2026-10-13T03:10:11","guid":{"rendered":"https:\/\/www.newsbeep.com\/ca\/930990\/"},"modified":"2026-10-13T03:10:11","modified_gmt":"2026-10-13T03:10:11","slug":"shock-and-surprise-after-fbi-arrests-canadian-cybersecurity-expert-in-shinyhunters-hacking-case","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/ca\/930990\/","title":{"rendered":"Shock and surprise after FBI arrests Canadian cybersecurity expert in ShinyHunters hacking case"},"content":{"rendered":"<p class=\"paragraph-b3GxD html-paragraph\">Canadians in the cybersecurity world say they were shocked to hear that a prominent ransomware negotiator had been arrested by the FBI over suspected connections to criminal hacking group ShinyHunters.\u00a0<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">FBI Director Kash Patel on Friday confirmed the arrest of a &#8220;suspected co-conspirator&#8221; in the recent ShinyHunters cyberattack on FBIjobs.gov which exposed a trove of sensitive data about FBI staff.<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">&#8220;We will continue to work closely with our partners to disrupt what&#8217;s left of the ShinyHunters group and their associates, no matter where they operate,&#8221; Patel said on social media.\u00a0<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\"><a class=\"link-_o8iA html-anchor\" href=\"https:\/\/www.reuters.com\/legal\/government\/canadian-ransomware-negotiator-arrested-amid-fbi-hacker-crackdown-2026-10-11\/\" target=\"_blank\" rel=\"nofollow noopener\">Reuters reported Sunday<\/a> that sources familiar with the matter identified the arrested suspect as Ed Dubrovsky, a Canadian cybersecurity executive whose career has focused on helping clients negotiate with ransomware attackers.<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">Court documents from the U.S. District Court for the Eastern District of Pennsylvania show Dubrovsky is facing two criminal charges: conspiracy to threaten to impair the confidentiality of information with the intent to extort money, and interference with commerce by threats.<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">The allegations have not been proven in court.\u00a0<\/p>\n<p><img decoding=\"async\" loading=\"lazy\" alt=\"A man in a suit sits at a desk and speaks into a microphone.\"   src=\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2026\/10\/1791861009_425_default.jpg\" style=\"aspect-ratio:1.5\" data-cy=\"image-img\"\/><\/p>\n<p class=\"imageCaption-oOSXz\">FBI Director Kash Patel testifies during a Senate Judiciary hearing on Oversight of the Federal Bureau of Investigation, in September 2026 in Washington. Patel confirmed the arrest of a suspected co-conspirator in the ShinyHunters investigation. (Manuel Balce Ceneta\/The Associated Press)<\/p>\n<p>&#8216;A sense of shock&#8217;<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">&#8220;For the cybersecurity community in general, I think that there&#8217;s a sense of shock,&#8221; Toronto-based tech and cybersecurity analyst Ritesh Kotak told CBC News on Monday.\u00a0<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">Kotak says Dubrovsky is &#8220;very popular&#8221; and has spoken at numerous conferences, but stressed that the charges &#8220;are clearly just allegations&#8221; and that it is not yet known &#8220;what exactly has happened.&#8221;\u00a0<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">&#8220;This is an individual that was for the most part respected when it came to ransomware negotiations,&#8221; he said. &#8220;A lot of people are familiar with his work as well.&#8221;\u00a0<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">The \u200bcourt records, which are partially sealed, provide conflicting spellings of the suspect&#8217;s last \u2060name \u2014 &#8220;Dobrovsky&#8221; or &#8220;Dobrosky&#8221; \u2014 and do not identify his age, profession or employer.\u00a0\u00a0<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">Prison records show a 54-year-old named Edward Dubrovsky is being held at a federal detention centre in Philadelphia. <\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">Reuters reported that electronic wallet records leaked in 2010 and preserved by dark-web intelligence firm District 4 Labs identify Dubrovsky as a 54-year-old resident of Richmond Hill, a suburb of Toronto.\u00a0<\/p>\n<p>Long history in cybersecurity<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">Dubrovsky&#8217;s LinkedIn profile describes him as a specialist in \u200cnegotiating with cybercriminals over ransom payments, as well as a &#8220;globally recognized cybersecurity expert, business leader, speaker, author and educator.&#8221;\u00a0<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">According to his profile, Dubrovsky has held senior positions in cybersecurity for decades.\u00a0<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">He wrote on LinkedIn last month that he would be attending the NetDilligence conference in Philadelphia in October with cybersecurity firm CyberSteward. The company posted photos of Dubrovsky at the conference a week ago and said he was signing copies of <a class=\"link-_o8iA html-anchor\" href=\"https:\/\/www.amazon.com\/dp\/B0HL33XNP6\" target=\"_blank\" rel=\"nofollow noopener\">a book he recently published<\/a> about handling cyber extortion.<\/p>\n<p>WATCH | Experts say AI will drive future cybercrime:<img decoding=\"async\" src=\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2026\/10\/1791861010_329_default.jpg\"  alt=\"\" class=\"thumbnail\" loading=\"lazy\"\/><\/p>\n<p class=\"video-item-title\">AI can make cyberattacks faster and smarter<\/p>\n<p>A new EY report suggests AI will become a major force behind cybercrime in 2026 as programs help attackers hone their scamming skills.<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">In the book&#8217;s introduction, Dubrovsky writes: &#8220;I have negotiated with criminals who viewed themselves as martyrs, criminal masterminds, and patriots of their own countries even after deploying malware against critical infrastructure and causing billions of dollars in damage. Such people could still look in the mirror and see goodness.&#8221;\u00a0<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">CBC News reached out to CyberSteward by phone, email and in person at its Toronto address, but did not get a response Monday.\u00a0<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">The FBI&#8217;s national press office declined to comment directly on Dubrovsky&#8217;s arrest and referred CBC News to Patel&#8217;s statement.\u00a0\u00a0<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">RCMP spokesperson Ian Lordon told The Canadian Press on Friday that &#8220;the RCMP is aware of the arrest of a Canadian in the U.S. in connection with the ShinyHunters hack,&#8221; but directed all further questions to the FBI.<\/p>\n<p>ShinyHunters &#8216;poked the bear&#8217;: expert<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">ShinyHunters is known as one of the world&#8217;s most prolific data theft and extortion groups, typically demanding ransom payments in exchange for not releasing the sensitive data it has obtained.\u00a0<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">The hacking group caused chaos at universities around the world in May, including in Canada, <a class=\"link-_o8iA html-anchor\" href=\"https:\/\/www.cbc.ca\/news\/canada\/canvas-cyber-attack-canadian-universities-9.7193648\" target=\"_blank\" rel=\"nofollow noopener\">with a cyberattack on Canvas<\/a>, an online learning-management system that connects millions of students with their instructors.\u00a0<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">ShinyHunters has also been associated with high-profile cyberattacks affecting companies including <a class=\"link-_o8iA html-anchor\" href=\"https:\/\/www.cbc.ca\/news\/business\/telus-cybersecurity-incident-shinyhunters-9.7126627\" target=\"_blank\" rel=\"nofollow noopener\">Telus<\/a>, Microsoft,<a class=\"link-_o8iA html-anchor\" href=\"https:\/\/www.cbsnews.com\/news\/ticketmaster-breach-shinyhunters-560-million-customers\/\" target=\"_blank\" rel=\"nofollow noopener\"> Ticketmaster<\/a>,<a class=\"link-_o8iA html-anchor\" href=\"https:\/\/www.reuters.com\/world\/americas\/hacking-group-shinyhunters-claims-theft-data-users-leading-sex-site-pornhub-2025-12-16\/\" target=\"_blank\" rel=\"nofollow noopener\"> Pornhub<\/a> and Rockstar Games.\u00a0<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">Last month, the group claimed responsibility for stealing a massive trove of data from the FBI \u2014 including officials&#8217; job assignments, addresses and social security numbers \u2014 in what it said was retaliation for the law enforcement agency making false claims about the group.<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">ShinyHunters later told CBC News they would not release the data.\u00a0<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">David Shipley, a cybersecurity expert and CEO of Fredericton-based Beauceron Security, said the stunt &#8220;poked the bear&#8221; and has &#8220;literally unleashed the most powerful law enforcement agency in the world on them.&#8221;<\/p>\n<p>WATCH | Canvas strikes deal with hackers:<img decoding=\"async\" src=\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2026\/10\/1791861011_630_default.jpg\"  alt=\"\" class=\"thumbnail\" loading=\"lazy\"\/><\/p>\n<p class=\"video-item-title\">Online learning platform strikes deal with hackers that targeted schools | Hanomansing Tonight<\/p>\n<p>The parent company behind Canvas, a widely used learning management platform connecting students with their schools or universities, has struck a deal with the hacking group claiming responsibility for last week&#8217;s massive cybersecurity breach.<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">Shipley said surprise was the first thing that came to mind when he heard of the latest arrest.<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">&#8220;I knew the ShinyHunters investigation was going to go in interesting places because it&#8217;s already the stuff of Hollywood movies,&#8221; he told CBC News.<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">&#8220;I don&#8217;t think anyone saw this twist coming.&#8221;<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">Shipley said Dubrovsky was well regarded and worked for &#8220;top-tier&#8221; cybersecurity firms.\u00a0<\/p>\n<p class=\"paragraph-b3GxD html-paragraph\">&#8220;I feel terrible for his former colleagues, both at his current firm and his past firms, who have been dragged through these awful headlines,&#8221; he said. <\/p>\n","protected":false},"excerpt":{"rendered":"Canadians in the cybersecurity world say they were shocked to hear that a prominent ransomware negotiator had been&hellip;\n","protected":false},"author":2,"featured_media":930991,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[45,49,48],"class_list":["post-930990","post","type-post","status-publish","format-standard","has-post-thumbnail","category-business","tag-business","tag-ca","tag-canada"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/930990","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/comments?post=930990"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/930990\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media\/930991"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media?parent=930990"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/categories?post=930990"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/tags?post=930990"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}