A significant development in the ongoing battle against the cybercriminal group ShinyHunters has emerged with the reported detention of Saif al-Din Khader, known online as 'Rey'. Authorities in Jordan took him into custody on September 29, 2026, and he is now cooperating with the FBI to help identify other members of the group. This cooperation is seen as crucial in the efforts to dismantle the ShinyHunters network, according to sources familiar with the investigation. Rey has a history of significant involvement in cybercrime, having previously been identified as an administrator for Scattered LAPSUS$ Hunters, Hellcat, and BreachForums. His willingness to work with law enforcement marks a turning point in the pursuit of ShinyHunters. This comes after the arrest of another individual linked to the group, Pepijn van der Stap, though the group has denied any association with him. ShinyHunters has recently been implicated in high-profile hacks, including the exploitation of the FBI's job application portal and the hijacking of a rival cybercriminal group's website. These actions have brought renewed attention to their operations, which have reportedly netted over $70 million in extortion payments from more than 140 organizations. The FBI is actively pursuing leads from these recent developments, emphasizing that arrests and seizures can shift the dynamics within cybercriminal networks. This persistence and evolution mark ShinyHunters not just as a group but as a resilient brand that continues to operate despite legal actions against its members. The group is believed to have roots in other notorious hacking collectives such as TheDarkOverlord and GnosticPlayers, demonstrating a long-standing capacity for adaptation and survival in the cybercriminal landscape.