Police Arrest Alleged ShinyHunters Leader After Group Claimed Rockstar Hack

Dutch police have arrested a 24-year-old man suspected of playing a role in ShinyHunters, the cybercrime group that claimed responsibility for breaching Rockstar Games earlier this year.

The suspect, a 24-year-old man from Amsterdam, was arrested on September 15, with Dutch authorities announcing the case on September 29. The FBI has separately described him as one of the alleged leaders of ShinyHunters, although neither agency has publicly accused him of personally carrying out the Rockstar breach that later exposed apparent internal GTA Online financial data.

Dutch police said the man is suspected of participating in a criminal organization and playing a role within ShinyHunters. Several data-storage devices were seized during the arrest and are now being examined as part of the investigation.

A Rotterdam court also ordered the suspect to remain in pretrial detention for at least another 90 days while the investigation continues.

The FBI has characterized the suspect's alleged position more strongly, describing him as one of ShinyHunters' alleged leaders. According to the bureau, the group has allegedly compromised more than 140 organizations since last year and received at least $70 million through extortion.

Those claims remain allegations while the investigation continues. Authorities have not publicly connected the arrested man himself to every attack attributed to ShinyHunters, including the Rockstar incident.

ShinyHunters claimed responsibility for accessing Rockstar information in April, alleging that it obtained data through a third-party service connected to the company's cloud infrastructure.

Rockstar confirmed at the time that "a limited amount of non-material company information" had been accessed in connection with a third-party breach. The company said the incident had no impact on its organization or players, but it did not confirm ShinyHunters' full account of how the intrusion happened.

The group later released material it claimed had come from Rockstar. Unlike the 2022 GTA 6 leak, which exposed unfinished development footage, the April data largely concerned internal business and performance information.

Among the leaked material were apparent revenue figures for GTA Online. Data independently checked by Kotaku indicated the game was generating roughly $1.3 million per day during the period covered by the files.

Those numbers did not come from an official Take-Two financial disclosure. They originated from leaked internal data, so they should be treated as apparent company metrics rather than formally reported revenue.

The new arrest is significant because of the FBI's claim that the suspect held a leadership role within ShinyHunters, but it does not establish who specifically accessed Rockstar's systems.

Dutch police are still examining seized devices, and further arrests have not been ruled out. The FBI has also said its investigation into ShinyHunters and associated cyberattacks is continuing.

For the Rockstar incident, the confirmed facts remain narrower than some of the claims surrounding it. Rockstar acknowledged that company information was accessed through a third-party breach, while ShinyHunters claimed responsibility and subsequently released data that appeared to contain internal GTA Online performance figures.

Whether evidence recovered during the Dutch investigation will directly connect the arrested suspect to that breach has not been publicly established.