Skip to content
Bramble

Crime

Dutch police arrest 24-year-old over ShinyHunters links and suspected murder plots

Dutch police say they arrested a 24-year-old Amsterdam man on 15 September as a suspected ShinyHunters member and are separately investigating him over two murders abroad. The FBI calls him an alleged leader; the group denies any association.

12 outlets · 7L · 3C · 2R First reported Account updated
Image: TechCrunch
Image: CBS News
Image: Fox News
Image: CNA
Image: The Independent
Image: The Straits Times
Image: NBC News
Image: The Verge

1 / 8

The story, neutrally told

Dutch National Police announced on 29 September that they had arrested a 24-year-old Amsterdam man on 15 September on suspicion of being part of the ShinyHunters hacking group. Police also suspect him of attempted incitement to commit two murders abroad, based on information found on his laptop; they say this is separate from the ShinyHunters investigation. A Rotterdam court ordered him held for a further 90 days, and police have not ruled out more arrests.

FBI Director Kash Patel called him one of the alleged leaders of ShinyHunters, and FBI cyber chief Brett Leatherman urged remaining members to come forward. Dutch police did not name him, but Reuters reported that his former employer, Neo Security, named him as Pepijn van der Stap; ShinyHunters says he has no association with the group. The arrest came before ShinyHunters claimed on 21 September to have breached the FBI's jobs portal, and NBC notes the FBI is not explicitly tying the arrest to that hack.

The group demanded the FBI retract a May advisory about it, but later told outlets it will not publish the stolen data.

Every sentence links to the reporting it rests on.

Left7 outlets

Framing
Mostly treat the arrest as part of the wider FBI breach saga, with attention to the stolen data and the group's statements.
Emphasis
The FBI breach, employee data exposure, ShinyHunters' retreat from its demand, and the FBI's warning to the group.
Leaves out or plays down
Some left-leaning pieces (CBC, NPR) focus on the breach rather than the murder allegation.
Charged language
“foreign intelligence service goldmine”
For example
“The bureau is not explicitly tying the Dutch man’s arrest to the FBI hack” — NBC News
“The hacking group behind a massive FBI data breach says it will not publish the information it obtained” — CBC News

Centre3 outlets

Framing
Lead on the arrest and the murder allegation, with careful sourcing and timing.
Emphasis
Police statements, the 15 September date preceding the FBI hack, the suspect's identification and the group's denial.
Leaves out or plays down
BBC does not mention the suspect's name or the denial.
For example
“Dutch police arrest ShinyHunters hacker accused of planning two murders” — TechCrunch
“The suspect, 24, was arrested before the alleged cyber attack took place.” — BBC News

Right2 outlets

Framing
Fox presents the arrest as a US law-enforcement win; the Straits Times (Reuters) reports the murder claims and the denial.
Emphasis
Patel's statement, FBI action and further arrests (Fox); Dutch media reports and the suspect's identification (Reuters).
Leaves out or plays down
Fox's first report omits the group's denial and that the arrest predated the FBI breach.
Charged language
“FBI strikes back”
For example
“FBI strikes back at hacking group with overseas arrest of alleged leader” — Fox News
“Police did not immediately confirm the reports.” — The Straits Times