Photo via The Straits Times

ShinyHunters hacker in FBI data theft detained in Jordan, cooperating with bureau, sources say

Read the original at The Straits Times ↗
Cite

The Straits Times. (2026, October 3). ShinyHunters hacker in FBI data theft detained in Jordan, cooperating with bureau, sources say. The Straits Times. https://www.straitstimes.com/world/shinyhunters-hacker-in-fbi-data-theft-detained-in-jordan-cooperating-with-bureau-sources-say

Dated when The Aporia collected the article, usually within hours of publication. Check the original for its exact date and byline.

The Straits Times · collected 2026-10-03 · by The Straits Times

Quick Summary

Jordanian authorities detained Saif al-Din Khader, a member of the ShinyHunters hacking group that claims to have stolen data on all FBI employees, according to sources speaking to Reuters. Two of the three sources reported that Khader was cooperating with the FBI to help identify other members of the hacking group. The FBI declined to comment specifically but stated they are continuing their investigation and working with international partners to arrest those involved.
Written by AI on 2026-10-03, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

Saif al-Din Khader, a suspected member of the ShinyHunters hacking group, was detained in Jordan this week. ShinyHunters claims to have stolen data on every FBI employee, including extensive personally identifiable information and sensitive job role details, amounting to 2 to 3 terabytes of data. Khader is cooperating with the FBI to identify other hackers involved in the theft; however, Reuters could not determine the exact circumstances of his detention or his current location. The FBI declined to comment on specific arrests but stated that they are aggressively investigating the incident and have already arrested multiple suspects involved with ShinyHunters.

Written for “ShinyHunters Hacker Detained” on 2026-11-01, grounded in this article and the 4 other(s) covering the same event.

Story

📰 ShinyHunters Hacker Detained
Technology · 5 article(s) covering the same event. Compare every outlet's account →

Compared with similar articles

This article reads unscored and hedges 44% of its claims. Each row says how that neighbour differs.
The Straits Times
Hedges 5 of 19 claims Outlet record 66/100
Times of India
Hedges 2 of 8 claims Outlet record 59/100
CBS News
Hedges 4 of 12 claims Outlet record 66/100
The Straits Times
Hedges 0 of 12 claims Outlet record 66/100
“The articles describe different arrests related to ShinyHunters, one in Amsterdam involving a reformed hacker and another in Jordan involving Saif al-Din Khader.”
The Straits Times
Hedges 2 of 10 claims Outlet record 66/100
“The articles describe different events involving separate individuals associated with the ShinyHunters hacking group.”
NBC News
Hedges 9 of 30 claims Outlet record 60/100
“The articles describe different arrests of ShinyHunters members in separate countries, indicating distinct events.”
NPR
Hedges 9 of 27 claims Outlet record 60/100
“Article A reports on the FBI's vow to hunt down ShinyHunters after they stole sensitive data, while Article B describes a separate incident where a member of ShinyHunters was detained in Jordan and is cooperating with the FBI.”
The Sydney Morning Herald
Hedges 0 of 36 claims Outlet record 61/100
“The articles describe different hacking incidents involving Saif al-Din Khader: one is related to the FBI data theft, and another mentions Qantas. Though they involve the same individual and similar circumstances of being detained in Jordan and cooperating with authorities, they are not reporting on the exact same incident.”
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
9
sentences that state something as happening or true
Uncertain
44%
4 of 9 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
66/100
The Straits Times's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
5
Technology
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-10-03 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

The Straits Times · 4103 article(s) · 5 correction(s) detected
Running correction rate · 5 correction(s)

Who wrote this

The Straits Times
2624 article(s) here · 1 carrying a prediction
🔮 We still have to take care of, I would say one or two sites, but we can do that in 10 minutes,” he told reporters at his Florida residence.
🔮 Asked if he would retain Huang as an advisor, Trump said: “I would like to say yes.
🔮 The decree also calls for deploying more rescue teams in hard-hit areas as Bolivia grapples with both flooding and drought because of El Nino, Paz said in an address to the nation. “This will be a phenomenon that will have very severe impacts in terms of drought and floods, and we need the cooperation of all institutions,” Paz said.
2026-11-01 · mixed framing · Bolivia declares state of emergency over El Nino
🔮 The new levy – coming just weeks before the Black Friday, Cyber Monday, and the Christmas season shopping rush – will be on top of the EU’s €3 fee on small parcels.
2026-11-01 · assertive framing · EU’s new levy on parcels kicks in
🔮 US midterm campaign enters final weekend as Alaska, California ballot fights heat up AI generated WASHINGTON/ANCHORAGE – President Donald Trump’s administration pressed a criminal investigation into Alaska’s pivotal US Senate race and said on Oct 31 it would likely take its fight over thousands of California mail-in ballots to the Supreme Court, as the midterm campaign for control of Congress entered its final weekend. In Alaska, federal prosecutors are investigating whether aides to Democratic challenger Mary Peltola helped to recruit a retired schoolteacher, Daniel J. Sullivan Jr, to run because his name is similar to the Republican incumbent, Senator Dan S. Sullivan. The closely contested race is seen as crucial to Democrats’ hopes of taking the Senate in the Nov 3 vote.
🔮 Many relatives of those still detained fear their loved ones will become an unwanted addition to the statistic.
🔮 Happy Birthday – and may every day be another wonderful secret,” the note ends, followed by Trump’s signature, which takes the place of pubic hair on the nude outline.
🔮 “The FBI, together with partners at the USSS and IRS-CI, has observed TraderTraitor actors converting stolen assets primarily into Ethereum,” the FBI said on Oct 31 in a statement, referring to the US Secret Service and the criminal division of the Internal Revenue Service. “It is expected these assets will then be further laundered by converting them using DeFi and instant swap services as they prepare them for further laundering stages.
🔮 Rubio’s EU counterpart, Kaja Kallas, said that Putin’s potential attendance at the G-20 leaders’ summit in Miami in December would risk regularising Russia’s return to international forums while its war in Ukraine rages.
🔮 Another US official said that after it became clear that some attendees were unwilling to participate in a joint photo, Rubio acted so the matter would not distract from substantive issues at the event.
Also by The Straits Times
Bolivia declares state of emergency over El Nino
2026-11-01 · The Straits Times
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 2624 articles by The Straits Times →

Topics

FBI Jordan Reuters ShinyHunters WASHINGTON

Subjects

FBI ORG · 6× Reuters ORG · 4× ShinyHunters ORG · 4× Khader PERSON · 3× Jordan GPE · 2× Chinese NORP · 1× Jordanian NORP · 1× Rey PERSON · 1× Saif al-Din Khader PERSON · 1× WASHINGTON GPE · 1×

Narrative

Two sources said that he is helping the FBI and global law enforcement locate the other hackers in the group.
framing: mixed · carried by 1 article(s) · first seen 2026-10-03
🔮 Reuters could not immediately determine the circumstances of Khader’s detention or his current whereabouts.

Claims (9 extracted, 4 hedged)

ShinyHunters hacker in FBI data theft detained in Jordan, cooperating with bureau, sources say asserted
sources → detain → bureau
A key member of the ShinyHunters hacking group, which claims to have stolen data on every FBI employee, was detained this week in Jordan, three people familiar with the matter told Reuters. uncertain
people → claim → Reuters
Two of the sources said he was cooperating with the FBI to identify his fellow hackers. asserted
he → say → hackers
Saif al-Din Khader was detained by Jordanian authorities, the three sources said. asserted
sources → detain → authorities
Two of them said he was brought into custody on Tuesday. asserted
he → say → Tuesday
Reuters could not immediately determine the circumstances of Khader’s detention or his current whereabouts. uncertain
Reuters → determine → detention
Two sources said that he is helping the FBI and global law enforcement locate the other hackers in the group. asserted
FBI → say → group
The FBI declined to comment on any specific arrest or activity abroad but said that the bureau "continues to aggressively investigate the recent cyber incident allegedly involving ShinyHunters, having already worked with partners to arrest multiple subjects — and we will spare no resource in bringing each of the responsible individuals to justice." Reuters’ attempts to reach Khader and members of his family over the past week and a half have been unsuccessful. The detention of Khader — whose alleged hacker nickname is Rey — is the latest twist in the case of ShinyHunters, a motley crew believed by experts to consist mainly of young, English-speaking hackers focused on data theft and extortion. uncertain
nickname → decline → theft
Their theft of what they claim are mountains of data on every single FBI employee has drawn comparisons to the allegedly Chinese-linked intrusion at the US Office of Personnel Management in 2015, which compromised sensitive details on millions of Americans who had been vetted for security clearances. uncertain
who → claim → clearances
💬Give feedback
🕘History 🎫Support