Federal Bureau of Investigation agents arrested an executive from a Canadian cybersecurity firm on Thursday in connection with an investigation into the ShinyHunters hacking group. Multiple sources tell KrebsOnSecurity that the suspect was detained while visiting Pennsylvania for a cyber insurance conference, specifically the Cyber Risk Summit held at the Loews Philadelphia Hotel between October 5 and October 7. The individual's company reportedly specialized in handling ransomware negotiations with cybercrime groups, placing him at the center of a complex probe into digital extortion tactics.
Court records indicate that a man identified as Edward Dobrovsky, with a slight variation in spelling from his professional profile, was arrested on October 8 on charges of conspiracy to threaten the confidentiality of information for monetary extortion and interference with commerce by threats. While several core documents remain sealed, indexed filings reveal the severity of the allegations. The U.S. Bureau of Prisons confirms that a 54-year-old Edward Dubrovsky is currently being held at a federal facility in Philadelphia, though a notice filed on October 9 moved the case to the Eastern District of Texas, which sources describe as the current epicenter of the FBI's ShinyHunters investigation.
Professional background checks link the suspect to two Canadian security entities: Cypfer and CyberSteward. LinkedIn profiles initially identified Dubrovsky as an ex-founder of Cypfer, though a spokesperson for the company later clarified that he served as a managing director before resigning in December 2025. He is currently associated with CyberSteward, another sponsor of the summit where he was arrested. Approximately one month prior to his detention, Dubrovsky posted on LinkedIn about attending the conference to discuss global strategies for compliant-driven coercive advisory and ransomware settlement services.
The arrest is part of a wider crackdown on ShinyHunters, a group that typically uses phishing and stolen credentials to siphon data from software-as-a-service companies before threatening to publish it unless ransoms are paid. According to the FBI, the group has extorted more than $70 million from victims this year alone. The investigation intensified after the Dutch police arrested convicted cybercriminal Pepijn van der Stap last month, leading agents to seize devices for analysis. Following Van der Stap's detention, a member known as "Rey," identified as teenager Saif Al-din Khader, assumed control of the group and taunted the FBI with stolen data from the agency's online recruitment portal.
The sensitive data stolen by ShinyHunters included details on thousands of FBI agents, such as their unit assignments, specializations, and medical or psychiatric records. Sources indicate that charges against principals at other companies specializing in ransomware negotiations may be forthcoming as investigators continue to pore over seized evidence. As of the latest reports, Dubrovsky does not currently have an attorney and has yet to be appointed a public defender by the courts. The FBI declined to comment on the specific details of this arrest.
Sources: Krebs on Security.