SHINYHUNTERS SUDDENLY GOES DARK AFTER FBI WARNING — WHAT HAPPENED?
Oct 01, 2026
The website operated by notorious hacking and extortion group ShinyHunters has suddenly gone offline, just as pressure from U.S. and Dutch law enforcement is rapidly increasing.
The timing has raised plenty of questions. Only a day earlier, FBI Cyber Division Assistant Director Brett Leatherman publicly addressed the remaining members of ShinyHunters following the arrest of a 24-year-old man in Amsterdam. His message was unusually direct: the FBI believes arrests and seized evidence are helping investigators learn more about the people behind the operation.
The FBI claims ShinyHunters and associated actors have breached more than 140 organizations since last year and collected at least $70 million in extortion payments. ShinyHunters recently escalated the confrontation by claiming it had compromised the FBI's own recruitment systems and obtained highly sensitive information relating to agents and applicants.
There is also disagreement over the Dutch arrest. Dutch police say the Amsterdam suspect is believed to have played a role within ShinyHunters, while the FBI described him as one of the group's alleged leaders. ShinyHunters denies this completely, telling journalists that the arrested man has no association with the group. The allegations against him have not been proven in court.
Then came another strange development. ShinyHunters had demanded that the FBI retract or modify an earlier advisory describing the group's activities and tactics. The deadline passed without the FBI doing so, and on September 30 the ShinyHunters website disappeared.
So what happened?
At the moment, there is no confirmed explanation. The disappearance could represent a temporary technical problem, a deliberate shutdown by the operators, an attempt to reduce their exposure as investigators close in, internal disruption following recent events, or potentially law-enforcement activity that has not yet been announced. Simply seeing a Tor site disappear is not enough to distinguish between those possibilities.
There is another reason not to declare ShinyHunters finished. Cybercrime groups are often fluid rather than conventional organizations with a fixed membership. Names, infrastructure and leak sites can disappear while individual actors continue operating elsewhere or under different identities.
For now, therefore, the biggest development isn't that ShinyHunters has definitely been taken down. It's that one of the world's most visible extortion groups has suddenly gone silent immediately after an extraordinary confrontation with the FBI — and nobody has publicly established why.
The timing has raised plenty of questions. Only a day earlier, FBI Cyber Division Assistant Director Brett Leatherman publicly addressed the remaining members of ShinyHunters following the arrest of a 24-year-old man in Amsterdam. His message was unusually direct: the FBI believes arrests and seized evidence are helping investigators learn more about the people behind the operation.
The FBI claims ShinyHunters and associated actors have breached more than 140 organizations since last year and collected at least $70 million in extortion payments. ShinyHunters recently escalated the confrontation by claiming it had compromised the FBI's own recruitment systems and obtained highly sensitive information relating to agents and applicants.
There is also disagreement over the Dutch arrest. Dutch police say the Amsterdam suspect is believed to have played a role within ShinyHunters, while the FBI described him as one of the group's alleged leaders. ShinyHunters denies this completely, telling journalists that the arrested man has no association with the group. The allegations against him have not been proven in court.
Then came another strange development. ShinyHunters had demanded that the FBI retract or modify an earlier advisory describing the group's activities and tactics. The deadline passed without the FBI doing so, and on September 30 the ShinyHunters website disappeared.
So what happened?
At the moment, there is no confirmed explanation. The disappearance could represent a temporary technical problem, a deliberate shutdown by the operators, an attempt to reduce their exposure as investigators close in, internal disruption following recent events, or potentially law-enforcement activity that has not yet been announced. Simply seeing a Tor site disappear is not enough to distinguish between those possibilities.
There is another reason not to declare ShinyHunters finished. Cybercrime groups are often fluid rather than conventional organizations with a fixed membership. Names, infrastructure and leak sites can disappear while individual actors continue operating elsewhere or under different identities.
For now, therefore, the biggest development isn't that ShinyHunters has definitely been taken down. It's that one of the world's most visible extortion groups has suddenly gone silent immediately after an extraordinary confrontation with the FBI — and nobody has publicly established why.