Dutch suspect linked to ShinyHunters faces Rotterdam court hearing

A 24-year-old man from Amsterdam is due before the Rotterdam District Court today, September 29, 2026, following his arrest two weeks ago in a Dutch police investigation into the ShinyHunters hacking group. The suspect, identified as Pepijn van der Stap and known online by the alias "Umbreon," was arrested on September 15 and is scheduled for a pretrial detention hearing rather than a full trial, as reported by BleepingComputer.

A Familiar Name to Investigators

Van der Stap is not a first-time suspect in cybercrime cases. He was previously convicted in January 2023 for hacking and extortion offenses, receiving a four-year sentence with one year suspended, plus three years of probation. Dutch police have not disclosed the specific evidence linking him to the current investigation, but the "Umbreon" alias — a reference to a dark-type Pokemon — has reportedly surfaced in connection with several of ShinyHunters' recent high-profile claims, including breaches attributed to the group involving the FBI and the Clop ransomware operation.

ShinyHunters Denies Any Connection

When contacted about the arrest, a representative claiming to speak for ShinyHunters dismissed any association with van der Stap, telling reporters: "That individual has no association with us. Frankly, we are laughing." That denial should be read with appropriate skepticism in both directions — extortion groups routinely disown members caught by police to protect the rest of the operation, and Dutch authorities have not yet presented public evidence establishing a definitive link either.

Why This Case Matters

ShinyHunters has been one of the most active extortion-focused hacking operations of 2026, linked to a string of high-profile breaches and a fresh wave of exploitation targeting Oracle PeopleSoft installations earlier this month. Cybercrime groups operating under a shared brand name are notoriously difficult to prosecute precisely because membership is loosely affiliated and easily denied — arrests of individuals connected to a name like ShinyHunters rarely dismantle the operation itself, but they do establish legal precedent and evidence trails that can implicate other members down the line.

Under Dutch criminal procedure, today's Rotterdam hearing is expected to focus on whether van der Stap continues to be held in pretrial detention while prosecutors build a formal case, rather than resolve guilt or innocence. Nothing about his connection to ShinyHunters has been confirmed by a court, and the presumption of innocence applies until any conviction.