Federal investigators are examining allegations that an executive from a U.S. consulting firm may have assisted the cybercriminal group ShinyHunters by operating a website used for extortion. This site, known as shinywire.com, reportedly listed nearly 100 organizations targeted by ShinyHunters, urging them to negotiate payment to prevent the release of stolen data. The FBI has not publicly identified or charged the suspected executive involved in running the site. However, the investigation has led to the arrest of Edward Dubrovsky, a 54-year-old Canadian cybersecurity executive, on charges related to conspiracy and threats to release confidential information. Dubrovsky's involvement in the shinywire.com operation has not been established, and the allegations remain under investigation.

The shinywire.com site, active from May to October 2026, displayed stolen files to pressure victims into negotiations. Companies that failed to engage risked having their data published on a separate ShinyHunters leak site. Investigators believe an American executive may have actively assisted in this extortion effort. Dubrovsky's arrest is part of the broader investigation, which gained momentum after Dutch authorities arrested another ShinyHunters suspect, Pepijn van der Stap, and accessed his Signal conversations. These messages allegedly revealed frequent contact between Dubrovsky and the unnamed executive, suggesting they may have known about breaches before the victims did.

The urgency of this investigation increased after ShinyHunters targeted the FBI's recruitment website, stealing sensitive data like Social Security numbers and medical information. This breach heightened the stakes for investigators as ShinyHunters typically uses phishing to steal credentials and extort victims without encrypting their systems. The FBI attributes over $70 million in payments to the group in 2026 alone. This case also highlights concerns about negotiators whose fees depend on ransom amounts, raising potential conflicts of interest. The FBI has advised victims not to respond to extortion demands and to report suspicious activities through proper channels. As investigations continue, more evidence will be needed to determine the full extent of any wrongdoing by Dubrovsky or the unnamed executive.