Photo via The Straits Times

ShinyHunters hacker in FBI data theft detained in Jordan, cooperating with bureau, sources say

Read the original at The Straits Times ↗
Cite

The Straits Times. (2026, October 3). ShinyHunters hacker in FBI data theft detained in Jordan, cooperating with bureau, sources say. The Straits Times. https://www.straitstimes.com/world/united-states/shinyhunters-hacker-in-fbi-data-theft-detained-in-jordan-cooperating-with-bureau-sources-say

Dated when The Aporia collected the article, usually within hours of publication. Check the original for its exact date and byline.

The Straits Times · collected 2026-10-03 · by The Straits Times

Quick Summary

A key member of the ShinyHunters hacking group, which claims to have stolen data on all FBI employees, was detained in Jordan this week. Sources say Saif al-Din Khader, also known by his hacker nickname Rey, is cooperating with the FBI and international law enforcement to identify other hackers within the group. The detention occurred on September 29, and Khader’s cooperation could help authorities locate additional members of ShinyHunters responsible for the theft.
Written by AI on 2026-10-03, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

Saif al-Din Khader, a suspected member of the ShinyHunters hacking group, was detained in Jordan this week. ShinyHunters claims to have stolen data on every FBI employee, including extensive personally identifiable information and sensitive job role details, amounting to 2 to 3 terabytes of data. Khader is cooperating with the FBI to identify other hackers involved in the theft; however, Reuters could not determine the exact circumstances of his detention or his current location. The FBI declined to comment on specific arrests but stated that they are aggressively investigating the incident and have already arrested multiple suspects involved with ShinyHunters.

Written for “ShinyHunters Hacker Detained” on 2026-11-02, grounded in this article and the 4 other(s) covering the same event.

Story

📰 ShinyHunters Hacker Detained
Technology · 5 article(s) covering the same event. Compare every outlet's account →

Compared with similar articles

This article reads unscored and hedges 26% of its claims. Each row says how that neighbour differs.
The Straits Times
Hedges 4 of 9 claims Outlet record 66/100
Times of India
Hedges 2 of 8 claims Outlet record 59/100
CBS News
Hedges 4 of 12 claims Outlet record 66/100
NBC News
Hedges 9 of 30 claims Outlet record 60/100
“The articles describe different arrests of ShinyHunters members in separate locations (Netherlands and Jordan) on different dates.”
NPR
Hedges 9 of 27 claims Outlet record 60/100
“Article A discusses the FBI's response to the data theft and their pursuit of ShinyHunters, while Article B reports on a specific arrest in Jordan and cooperation with the FBI.”
The Sydney Morning Herald
Hedges 0 of 36 claims Outlet record 61/100
“The articles mention different hacking incidents: one involving the FBI and another involving Qantas, even though they both refer to Saif al-Din Khader.”
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
19
sentences that state something as happening or true
Uncertain
26%
5 of 19 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
66/100
The Straits Times's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
5
Technology
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-10-03 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

The Straits Times · 4130 article(s) · 5 correction(s) detected
Running correction rate · 5 correction(s)

Who wrote this

The Straits Times
2668 article(s) here · 1 carrying a prediction
🔮 UN peacekeeping mission in Western Sahara ends after 35 years, UN chief says Nov 1 - The 35-year-old UN peacekeeping mission in the Western Sahara region will come to an end after the Security Council failed to renew its mandate, the UN chief said on Sunday.
🔮 The pope said he hoped cooperation between Russia and Ukraine in implementing a ceasefire in Oleshky would pave the way for broader peace efforts.
🔮 If not for the “economic funk” engulfing most voters, the National Party would have a much easier route back to office, said political commentator Grant Duncan.
🔮 Explainer-How Trump’s noncitizen voter lists could affect the midterms
🔮 “It’s been a hell of a year – analogue astronauts living in captivity of our own free will,” Ellen Ellis, the medical officer on the Crew Health and Performance Exploration Analog, or CHAPEA, mission, said in remarks at Johnson Space Center after emerging with her three crewmates on Oct 31. The four entered the 1,700-square-foot (158sq m) 3D-printed habitat on Oct 19, 2025, and performed tasks such as growing crops in simulated Martian soil and interfacing with NASA officials with delays recreating those inherent in interplanetary communications.
🔮 Races in some areas are so tight, that turnout from the Indian community may change the outcomes, rally organisers say.
🔮 Initial complaints were expected to be filed on Nov 1.
🔮 Final results are due in coming days and not expected to change the outcome.
🔮 The head of a student group said a campaign of high school blockades would restart from Nov 2, adding the government’s proposals did not go far enough.
🔮 “Evidence is being reviewed and further action will be taken as appropriate.”
Also by The Straits Times
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 2668 articles by The Straits Times →

Topics

FBI Jordan Reuters ShinyHunters WASHINGTON

Subjects

FBI ORG · 11× ShinyHunters ORG · 8× Reuters ORG · 7× Khader PERSON · 4× Jordan PERSON · 2× Chinese NORP · 1× Jordanian NORP · 1× Rey PERSON · 1× Saif al-Din Khader PERSON · 1× WASHINGTON GPE · 1×

Narrative

A Reuters analysis of a sample of the data shared by ShinyHunters revealed that the data contained extensive personally identifiable information of FBI employees, sensitive job role information, and psychiatric and medical information.
framing: mixed · carried by 1 article(s) · first seen 2026-10-03
🔮 Reuters could not immediately determine the circumstances of Khader’s detention or his current whereabouts.

Claims (19 extracted, 5 hedged)

ShinyHunters hacker in FBI data theft detained in Jordan, cooperating with bureau, sources say AI generated asserted
sources → detain → bureau
A key member of the ShinyHunters hacking group, which claims to have stolen data on every FBI employee, was detained this week in Jordan, three people familiar with the matter told Reuters. uncertain
people → claim → Reuters
Two of the sources said he was cooperating with the FBI to identify his fellow hackers. asserted
he → say → hackers
Saif al-Din Khader was detained by Jordanian authorities, the three sources said. asserted
sources → detain → authorities
Two of them said he was taken into custody on Sept 29. asserted
he → say → Sept
Reuters could not immediately determine the circumstances of Khader’s detention or his current whereabouts. uncertain
Reuters → determine → detention
Two sources said that he is helping the FBI and global law enforcement locate the other hackers in the group. asserted
FBI → say → group
The FBI declined to comment on any specific arrest or activity abroad but said that the bureau "continues to aggressively investigate the recent cyber incident allegedly involving ShinyHunters, having already worked with partners to arrest multiple subjects - and we will spare no resource in bringing each of the responsible individuals to justice." Reuters’ attempts to reach Khader and members of his family over the past week and a half have been unsuccessful. uncertain
attempts → decline → week
The prolific cyber extortion group, which has a long history of targeting major corporations around the world, is believed by experts to consist mainly of young, English-speaking hackers focused on data theft and extortion. asserted
which → have → theft
Their theft of what they claim are mountains of data on every single FBI employee has drawn comparisons to the allegedly Chinese-linked intrusion at the US Office of Personnel Management in 2015, which compromised sensitive details on millions of Americans who had been vetted for security clearances. uncertain
who → claim → clearances
A Reuters analysis of a sample of the data shared by ShinyHunters revealed that the data contained extensive personally identifiable information of FBI employees, sensitive job role information, and psychiatric and medical information. asserted
data → share → employees
Khader's cooperation with investigators could be critical to helping contain - or at least understand - the damage. uncertain
cooperation → help → damage
One source said he was walking investigators through his electronic devices and digital correspondence to help the FBI locate his cohorts. asserted
FBI → say → cohorts
"His cooperation is critical to ongoing efforts to arrest these hackers," the source told Reuters. asserted
source → arrest → Reuters
There have been hints for days that ShinyHunters was experiencing disruption following the announcement of its break-in at the FBI. asserted
ShinyHunters → experience → FBI
Beginning on Sept 29, Reuters was unable to reach ShinyHunters through the online account it previously used to communicate with journalists. asserted
it → begin → journalists
Then, on Sept 30, the group’s dark web site, where it had previously posted threats to the FBI, disappeared. asserted
it → post → FBI
The bureau’s director, Kash Patel, has been hinting at more arrests following the announcement that another alleged ShinyHunters member, Pepijn van der Stap, had been detained in the Netherlands. asserted
member → hint → Netherlands
“FBI teams are working new leads RIGHT NOW,” Patel said on Sept 30 in a message posted to X. “More arrests are on the table.” asserted
arrests → work → table
💬Give feedback
🕘History 🎫Support