A Canadian cybersecurity executive was arrested in Pennsylvania on Thursday, facing federal charges of conspiracy to commit extortion. Edward Dubrovsky, 54, a co-founder and former Chief Operating Officer of CYPFER, a firm specializing in ransomware negotiation, is charged with conspiring to threaten the confidentiality of information for extortion and conspiring to commit Hobbs Act extortion, which involves using threats to affect interstate commerce to obtain money.
While federal authorities have not publicly confirmed the specific connection, details of the arrest align with ongoing investigations into the ShinyHunters attack on FBI IT systems. FBI Director Kash Patel stated on social media that another suspected co-conspirator of the group had been arrested, though he did not name the individual. Reports indicate a Canadian man was arrested in Pennsylvania in connection with the FBI breach.
Dubrovsky's professional background includes his role at CYPFER and an affiliation with CyberSteward, a Toronto-based firm also involved in assisting breach victims with ransom negotiations. Last month, Dubrovsky released a book on ransomware negotiation strategies. Neither Dubrovsky nor CYPFER have responded to requests for comment.
The FBI breach, which exposed personal data of thousands of bureau employees, has drawn significant attention. The bureau confirmed the breach resulted from a third-party platform where a contractor failed to install a security patch. Reports identified the contractor as working for Accenture.
ShinyHunters is a known threat group that has previously targeted major cloud platforms, healthcare organizations, universities, technology companies, retailers, and education service providers. Earlier victims this year reportedly include Instructure, Salesforce, Snowflake, and McKesson.
Several individuals have been taken into custody in connection with the ShinyHunters activities. In September, Dutch authorities arrested a 24-year-old suspected of affiliation with the group. Additionally, a teenager, identified as Saif Al-din Khader, was reportedly detained and is cooperating with investigators.
Dubrovsky's case has been transferred to the Eastern District of Texas, where he will remain detained pending a scheduled detention hearing.
