Photo via CBS News

ShinyHunters hacker detained in Jordan, cooperating with FBI, sources say

Read the original at CBS News ↗
Cite

Lynch, S. N., & Milton, P. (2026, October 4). ShinyHunters hacker detained in Jordan, cooperating with FBI, sources say. CBS News. https://www.cbsnews.com/news/shinyhunters-hacker-detained-jordan-cooperating-fbi-sources-say/

Dated when The Aporia collected the article, usually within hours of publication. Check the original for its exact date and byline.

CBS News · collected 2026-10-04 · by Sarah N. Lynch, Pat Milton

Quick Summary

U.S. officials report that Jordanian authorities detained Saif al-Din Khader this week, suspected of being part of ShinyHunters, a hacking group responsible for defacing the FBI's website last month. The arrested individual is cooperating with investigators, according to sources. Earlier, Dutch police had reported arresting a 24-year-old from Amsterdam named Pepijn van der Stap in connection with the same hacking group, though ShinyHunters denied any association and criticized Dutch authorities.
Written by AI on 2026-10-04, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

Saif al-Din Khader, a suspected member of the ShinyHunters hacking group, was detained in Jordan this week. ShinyHunters claims to have stolen data on every FBI employee, including extensive personally identifiable information and sensitive job role details, amounting to 2 to 3 terabytes of data. Khader is cooperating with the FBI to identify other hackers involved in the theft; however, Reuters could not determine the exact circumstances of his detention or his current location. The FBI declined to comment on specific arrests but stated that they are aggressively investigating the incident and have already arrested multiple suspects involved with ShinyHunters.

Written for “ShinyHunters Hacker Detained” on 2026-10-31, grounded in this article and the 4 other(s) covering the same event.

Story

📰 ShinyHunters Hacker Detained
Technology · 5 article(s) covering the same event. Compare every outlet's account →

Compared with similar articles

This article reads unscored and hedges 33% of its claims. Each row says how that neighbour differs.
The Straits Times
Hedges 4 of 9 claims Outlet record 66/100
Times of India
Hedges 2 of 8 claims Outlet record 59/100
The Straits Times
Hedges 5 of 19 claims Outlet record 66/100
The Sydney Morning Herald
Hedges 0 of 36 claims Outlet record 61/100
NBC News
Hedges 2 of 16 claims Outlet record 60/100
“Article A discusses the detention of a ShinyHunters member and their cooperation with FBI, while Article B addresses the cause of the FBI's jobs website hack due to a contractor's failure.”
The Straits Times
Hedges 4 of 40 claims Outlet record 66/100
“Article A describes the detention of Saif al-Din Khader in Jordan, while Article B discusses a friend's attempt to dissuade Khader from hacking the FBI months earlier.”
Toronto Star
Hedges 0 of 2 claims Outlet record 64/100
“The articles describe related events involving ShinyHunters but refer to different arrests in different locations and times.”
Fox News
Hedges 1 of 15 claims Outlet record 70/100
“The articles mention different arrests or detentions of suspected ShinyHunters members, with ARTICLE A focusing on a detention in Jordan and ARTICLE B on an arrest announced by FBI Director Kash Patel.”
ABC News (US)
Hedges 5 of 15 claims Outlet record 70/100
“The articles mention different arrests of ShinyHunters members at different times (one detained in Jordan and one arrested by FBI), indicating separate incidents.”
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
12
sentences that state something as happening or true
Uncertain
33%
4 of 12 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
66/100
CBS News's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
5
Technology
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-10-04 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

CBS News · 4237 article(s) · 6 correction(s) detected
Running correction rate · 6 correction(s)

Who wrote this

Sarah N. Lynch
29 article(s) here · 1 carrying a prediction
🔮 The Justice Department has issued grand jury subpoenas to state and local officials in California, escalating a dispute over allegations by the federal government that the state may have as many as 20,000 non-citizens registered to vote ahead of the midterm elections, according to sources with direct knowledge and copies seen by CBS News.
🔮 Former DOJ officials say Attorney General Todd Blanche's Justice Department has entered uncharted waters in ways that could influence politics as voters cast ballots, in contravention of long-standing policies and practices.
🔮 But the government has treated him like part of the prosecutorial team itself, choosing to allow F-9 to decide which of the documents, recordings, and photographs in his possession he will produce, and how and when he will produce them," SPLC's attorneys wrote.
🔮 A criminal case that was directed by Director Kash Patel could be in jeopardy, after defense attorneys raised doubts about the strength of the evidence and the motives behind the charges.
🔮 Such overt investigative steps involving a sitting member of Congress so close to an election appear to run afoul of internal Justice Department guidelines, which state that prosecutors and agents should avoid taking overt investigative steps that could affect the outcome of an election or give one candidate an advantage or disadvantage.
🔮 Gupta, who in February pleaded guilty to murder-for-hire, conspiracy to commit murder-for-hire, and conspiracy to commit money laundering, is set to be sentenced in November, and Pannun is expected to speak at the sentencing.
🔮 "If found responsible in a court of law, the State of California will have seriously undermined confidence in our electoral system and violated laws that protect our nation's representative system of government.
🔮 The Justice Department said on Friday it will no longer enforce certain provisions of a 1934 law that was passed by Congress to regulate the types of firearms often used by mobsters, after a federal judge declared large parts of the law were unconstitutional.
🔮 Federal prosecutors have been presenting evidence to a grand jury in Washington, D.C., on whether former White House aide Cassidy Hutchinson may have lied to Congress in her testimony related to the on the U.S. Capitol, two sources familiar with the matter told CBS News.
🔮 CBS News could not determine the status of the investigation, which remained open as recently as this summer, one of the sources said.
Also by Sarah N. Lynch
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 29 articles by Sarah N. Lynch →
Pat Milton
5 article(s) here · 1 carrying a prediction
🔮 The Bend Police Department said Monday it expected to finish collecting evidence at the school by the end of the day, and would then turn the building back over to the school district.
🔮 I will tell you that at the White House, White House is the safest place on Earth."
🔮 How would you describe the current threat environment in this country?
🔮 It is unclear how many other alleged hackers may be involved, a U.S. source told CBS News.
🔮 " When it comes to AI, Raia said it has allowed the bureau to move with more alacrity, without being overwhelmed by more data than any analyst could sift through.
Also by Pat Milton
Nothing else under this byline is closely related to this article, so these are simply their most recent.

Topics

CBS News FBI Reuters ShinyHunters U.S.

Subjects

ShinyHunters ORG · 7× FBI ORG · 5× U.S. GPE · 3× CBS News ORG · 2× Dutch NORP · 2× Reuters ORG · 2× Bureau ORG · 1× Jordan GPE · 1× Jordanian NORP · 1× Saif al-Din Khader PERSON · 1×

Narrative

Last month, ShinyHunters claimed in communications posted on the dark web and exchanges with multiple media outlets that it stole 2 to 3 terabytes of data related to FBI workers.
framing: mixed · carried by 1 article(s) · first seen 2026-10-04
🔮 It is unclear how many other alleged hackers may be involved, a U.S. source told CBS News.

Claims (12 extracted, 4 hedged)

A suspected member of ShinyHunters, the hacking group that claimed responsibility last month for defacing the FBI's website, was detained in Jordan this week and is cooperating with the investigators, according to U.S. officials. uncertain
that → suspect → officials
Jordanian authorities detained Saif al-Din Khader this week, according to two U.S. officials and another source with knowledge of the matter. uncertain
authorities → detain → matter
ShinyHunters, a notorious cybercrime group, has claimed responsibility for a series of high-profile data breaches and has asserted, without public verification, that it . asserted
ShinyHunters → claim → verification
It is unclear how many other alleged hackers may be involved, a U.S. source told CBS News. uncertain
source → allege → News
The FBI declined to comment on the arrest but said in a statement that "the Bureau continues to aggressively investigate the recent Cyber incident allegedly involving ShinyHunters, having already worked with partners to arrest multiple subjects and we will spare no resource in bringing each of the responsible individuals to justice." uncertain
we → decline → justice
The arrest was first reported by Reuters. asserted
arrest → report → Reuters
Last month, ShinyHunters claimed in communications posted on the dark web and exchanges with multiple media outlets that it stole 2 to 3 terabytes of data related to FBI workers. asserted
it → claim → workers
The hackers claimed to have used a new vulnerability with Oracle PeopleSoft, a human resources management program. asserted
hackers → claim → PeopleSoft
A second suspected member of the group, identified as a 24-year-old from Amsterdam, was of being a member of ShinyHunters, Dutch National Police and the FBI previously reported. asserted
Police → suspect → ShinyHunters
That means he was already in custody days before ShinyHunters announced it had hacked the FBI jobs website, which was first reported on Sept. 22 by 404 Media. asserted
which → mean → Media
Dutch police did not identify the suspect by name, but sources familiar with the case confirmed to CBS News that the man is Pepijn van der Stap. asserted
man → identify → News
In a statement to Reuters, ShinyHunters said Van der Stap had "no association" with the group and that Dutch police were incompetent. asserted
police → say → group
💬Give feedback
🕘History 🎫Support