FBI Arrests Executive at Ransomware Negotiation Firm

Federal Bureau of Investigation (FBI) agents arrested an executive from a Canadian cybersecurity firm on Thursday in Pennsylvania, as part of an ongoing investigation into the ShinyHunters hacking group. This group is reportedly responsible for a recent data breach that compromised sensitive information on thousands of FBI agents. The New York Times reported the arrest of a Canadian national suspected of aiding ShinyHunters, though the individual's identity was not disclosed in their report or in a statement from FBI Director Kash Patel. Sources close to the investigation revealed to KrebsOnSecurity that the arrested individual, a Canadian citizen, was attending a cyber insurance conference in Pennsylvania at the time of their apprehension. The suspect's company reportedly specializes in managing ransomware negotiations with cybercrime organizations. Control of the ShinyHunters investigation has been consolidated at an FBI field office located in Texas. Online records indicate that the Cyber Risk Summit, a conference focused on cyber insurance, took place at the Loews Philadelphia Hotel from October 5 to October 7. Cypfer, a Canadian security company, was listed as the primary sponsor of this summit, according to the event's website. Edward Dubrovsky, identified on LinkedIn as an "ex-founder" of Cypfer, is also associated with another Canadian security firm and summit sponsor named CyberSteward. Approximately one month prior to the arrest, Dubrovsky posted on LinkedIn about his intention to attend the Cyber Risk Summit with the CyberSteward team. An update on October 10, 9:58 a.m. ET, from a Cypfer spokesperson clarified that Dubrovsky was not a founder or co-founder, contrary to his LinkedIn profile, but rather served as a managing director before resigning in November 2025. In his LinkedIn post, Dubrovsky expressed enthusiasm for discussing "strategy & compliant driven coercive (ransomware, extortion) advisory, negotiations and settlement services that are global and truly agnostic." Federal court records are expected to provide further details on the charges and the scope of the investigation into the alleged assistance provided to the ShinyHunters group, which has been linked to significant data exfiltration incidents.