The arrest of a Canadian cybersecurity expert in the United States has sent a ripple through Toronto's security community, after the FBI took the man into custody in connection with ShinyHunters, one of the world's most prolific data-theft and extortion groups. CBC News reported that it sought comment from CyberSteward, the Toronto firm connected to the accused, by phone, email and in person at its Toronto address, but received no response.
ShinyHunters is blamed for a string of major breaches, including a May attack on Canvas, the learning platform used by millions of students and instructors, which disrupted universities in Canada and abroad. The group has also been associated with incidents affecting companies including Telus, Microsoft, Ticketmaster and Rockstar Games, and last month claimed it had stolen a large trove of FBI data before later telling CBC it would not release it.
The RCMP confirmed to The Canadian Press that it is aware of a Canadian's arrest in the U.S. in connection with the ShinyHunters hack, but referred further questions to the FBI. The bureau's national press office declined to comment directly and pointed reporters to an earlier statement by its leadership.
David Shipley, a Fredericton-based cybersecurity expert, said the group's taunting of law enforcement had effectively poked the bear, unleashing the full attention of U.S. investigators. Colleagues quoted in coverage described shock and surprise at the arrest of a figure known in defensive-security circles.
The case adds a Canadian chapter to an international crackdown on extortion crews that steal data and demand payment not to publish it. No court outcome has been reported, and the allegations against the accused have not been tested in court.
