Overview
- Jordanian authorities detained Saif al‑Din Khader, known online as “Rey,” this week and multiple sources say he was taken into custody on Tuesday and is cooperating with the FBI by showing investigators his devices and messages.
- The FBI says it is aggressively investigating the incident and has worked with international partners to arrest multiple suspects, with Dutch police already detaining a 24‑year‑old Amsterdam man on Sept. 15 in the same probe.
- ShinyHunters has claimed it stole roughly 2–3 terabytes of FBI personnel data; a Reuters review of samples found extensive personally identifiable information, sensitive job‑role details, and psychiatric and medical records.
- Security researchers have linked many of the group's intrusions to mass exploitation of an Oracle PeopleSoft flaw, CVE‑2026‑35273, highlighting recurring risks from third‑party and cloud‑connected vendor systems.
- Investigators are conducting forensic analysis to confirm the breach origin and full scope of the data, and officials warn Khader’s cooperation could produce new leads, further arrests, and clearer attribution even as the group's public infrastructure shows disruption.