Jordanian authorities detained Saif al-Din Khader this week, and U.S. sources say the suspected ShinyHunters member is cooperating with investigators. The FBI says it is aggressively investigating a cyber incident allegedly involving the group and has worked with partners to arrest multiple subjects. ShinyHunters claims it accessed FBI worker data, but that claim has not been publicly verified, and the reported data volume is the group’s own assertion. A separate suspected member was arrested in the Netherlands in September, though ShinyHunters denies he was associated with it. Charges, extradition steps, cooperation details, and a timetable for further legal action have not been reported, leaving evidence and due process central to what comes next.
TLDR: A suspected ShinyHunters member was detained in Jordan, with U.S. sources reporting cooperation with investigators. The FBI says its international investigation continues, while claims about stolen FBI data remain unverified and formal legal steps in the Jordan case have not been detailed.
A suspected ShinyHunters member has been detained in Jordan and is cooperating with investigators, according to U.S. officials and another source familiar with the matter. Jordanian authorities detained Saif al-Din Khader this week, the sources said. The reported detention adds an international partner to an investigation into a cyber incident that the FBI says it is pursuing aggressively.
The FBI’s stated rationale is direct: it is investigating the recent cyber incident allegedly involving ShinyHunters and says it will use its resources to bring those responsible to justice. The Bureau also said it has worked with partners to arrest multiple subjects. That cross-border cooperation is a practical way to pursue a case whose suspected participants and reported activity span more than one country.
The reported arrest has not been publicly detailed by the FBI. The Bureau declined to comment on Khader’s arrest, and the available account does not describe formal charges, a court appearance, or any extradition process. The reported detention and cooperation therefore should not be confused with a confirmed U.S. prosecution or a finding of guilt. At this stage, the public account offers few details about how the detention was arranged or what investigators have established. Those limits make it difficult to assess the case beyond the reported cooperation between authorities and Khader.
ShinyHunters claimed responsibility last month for defacing the FBI’s website. It has also claimed a series of high-profile data breaches and asserted that it obtained data on every FBI employee. That assertion has not been publicly verified. The group said in communications posted on the dark web and in exchanges with media outlets that it stole between two and three terabytes of data related to FBI workers.
The group claimed it used a new vulnerability in Oracle PeopleSoft, a human resources management program. The available information does not independently confirm that claim or establish what information, if any, was accessed. Those limits matter: the size and nature of the alleged data theft remain claims attributed to the group, not established findings presented by investigators. A claim of access also does not, by itself, show that the data was copied, published, or used. No details in the available account establish whether FBI systems or employees faced any further effects from the alleged incident.
The Jordan detention is not the only reported arrest connected to the investigation. Dutch National Police and the FBI previously reported that a 24-year-old man from Amsterdam was arrested on September 15 on suspicion of being a ShinyHunters member. Sources familiar with that case identified him to CBS News as Pepijn van der Stap, while Dutch police did not publicly name him.
The timing of that arrest is notable but does not resolve the allegations. Van der Stap was already in custody days before ShinyHunters announced that it had hacked the FBI jobs website. That announcement was first reported on September 22 by 404 Media. ShinyHunters later told Reuters that Van der Stap had “no association” with the group and criticized Dutch police. Those statements are the group’s claims; the excerpt does not describe a court ruling on the matter. The two reported detentions also do not establish how many people investigators believe took part or whether the cases are based on the same evidence.
The reported cooperation by Khader may assist investigators, but its scope is not known. No account specifies what information he has provided, how the evidence is being gathered, or what legal steps Jordanian authorities may take next. The number of other alleged hackers involved is also unclear, according to a U.S. source. These gaps leave the investigation’s reach and timetable uncertain. Cooperation may help authorities compare accounts or follow leads, but there is no public information on whether that has happened in this case.
For people directly affected, the known practical impact is limited to the reported detentions and the FBI’s continuing investigation. The excerpt identifies no fees, new paperwork, compliance rules, public filing requirements, or deadlines for individuals or businesses. It also gives no details about any transfer of Khader to U.S. custody. Cross-border jurisdiction is central to the case, but the steps and terms of any cooperation beyond the reported investigation are not specified. That means people and organizations cannot draw conclusions from this account about new obligations, enforcement measures, or a timetable for action.
The matter now depends on investigative work by the FBI and its partners, along with any legal process undertaken by Jordanian and Dutch authorities. The Bureau says it has already worked with partners to arrest multiple subjects and will spare no resource in pursuing those responsible. Further confirmed legal steps and evidence remain necessary to establish what happened and who was involved. Until more information is made public, the allegations, the claimed data theft, and the nature of Khader’s cooperation remain distinct from proven findings. Those are necessary steps for accountability and lawful compliance.
Lila Hayes serves as a Staff Writer for Just Right News, where she anchors the “Courts, Law, and Constitutional Order” beat. Her work is defined by a steadfast commitment to the foundational principles of the American republic and a rigorous defense of the legal frameworks that ensure national stability. As a primary voice for the outlet, she provides readers with a clear-eyed analysis of the judiciary, focusing on the importance of originalism and the preservation of the separation of powers.
Lila’s perspective was forged in the American heartland. Raised in St. Louis, Missouri, she grew up in a Hispanic household where the values of hard work, faith, and respect for the law were paramount. Her upbringing instilled in her a deep appreciation for the American Dream and the legal protections that make it possible. This Missouri background remains a cornerstone of her reporting, providing a grounded, common-sense counter-narrative to the often-insular legal circles of the coastal elite. She understands that the decisions made in high-court chambers have real-world consequences for families and small business owners across the country.
At Just Right News, Lila has become widely recognized for her signature feature series, “The Rulebook of Power.” In this ongoing project, she delves into the mechanics of the federal government, examining how administrative overreach and judicial activism can threaten the delicate balance of the Constitution. She approaches her beat with the tenacity of a veteran journalist and the precision of a legal scholar, consistently advocating for a judiciary that interprets the law as written rather than legislating from the bench. For Lila, the Constitution is not a “living” document subject to the whims of modern social trends; it is a fixed standard that ensures the government remains the servant of the people, not their master.
Now based in Philadelphia, Pennsylvania, Lila finds herself at the very epicenter of American constitutional history. Living and working in the city where the Founders drafted the documents she defends daily provides a constant source of inspiration. The historic halls and landmarks of Philadelphia serve as a daily reminder of the high stakes involved in her reporting. Her presence in the city allows her to bridge the gap between the historical intent of the law and its contemporary application, ensuring that the legacy of the Founding Fathers remains central to the national conversation.
Throughout her career, Lila has remained dedicated to the idea that a free society requires an informed citizenry and a transparent legal system. Her reporting is more than just a collection of headlines; it is a defense of the constitutional order that has sustained the nation for over two centuries. By focusing on the “Rulebook of Power,” she ensures that her readers understand not just what is happening in the courtrooms, but why those decisions matter for the future of American liberty. Lila Hayes continues to be a vital voice for those who believe that the law should be a shield for the citizen and a constraint on the state.