A Canadian cybersecurity executive who specializes in ransomware negotiations was arrested in the Philadelphia area on federal charges as the FBI moves against the ShinyHunters hacking group.
Edward Dubrovsky, 54, was taken into custody Thursday and faces allegations of conspiracy to threaten the confidentiality of information to extort money and interference with commerce, according to federal court records filed in the Eastern District of Pennsylvania.
Fox Business reported that the criminal case tied to him in the Eastern District of Texas remains sealed, limiting public detail on the underlying conduct. Prosecutors asked that he be detained, and a judge ordered him held pending a detention hearing in Texas.
A separate court order issued Friday directed the U.S. Marshals Service to transport Dubrovsky to Texas for further proceedings. The Federal Bureau of Prisons inmate locator lists him at the Federal Detention Center in Philadelphia with a release date marked unknown.
Dubrovsky is a Canadian cybersecurity executive whose work focuses on negotiating with ransomware hackers. His LinkedIn profile ties him to CyberSteward, a firm that advertises services including talks with threat actors, cyber extortion handling, and settlement facilitation.
FBI Director Kash Patel posted Friday on X that agents had arrested another suspected co-conspirator of the ShinyHunters group. He did not name the person taken into custody.
Patel wrote:
"Our agents in the field have arrested another suspected co-conspirator of the ShinyHunters group, the group believed to be responsible for the recent FBIjobs.gov incident, which occurred on a platform managed by a third-party vendor,"
He added that the arrest was the latest involving the network in a matter of days as the FBI works to dismantle the group and chase additional leads.
ShinyHunters recently claimed to have stolen information concerning nearly every FBI employee. The FBIjobs.gov incident sat on a platform run by a third-party vendor. Authorities have not publicly confirmed whether Dubrovsky is the individual Patel referenced or whether his case connects directly to that investigation.
Court records in Pennsylvania list the charges against Dubrovsky, yet the sealed Texas proceedings leave the specific alleged acts unclear. No case number or docket details have been released in the available reporting. Absolute calendar dates for the Thursday arrest and Friday orders were not provided.
The sequence shows rapid movement: arrest and detention order in Pennsylvania on Thursday, followed by Patel’s public statement and the transport order on Friday. Dubrovsky remains in federal custody in Philadelphia while awaiting transfer.
FBI field operations continue under Patel’s leadership, including other recent cases such as the arrest of a Minnesota teen accused in an ISIS-inspired plot. The bureau has also seen internal shifts, with figures like Andrew Bailey stepping down as co-deputy director.
Records from earlier periods show the bureau’s investigative reach under prior leadership, including how the FBI under Biden tracked travel and communications in high-profile probes. Patel has likewise drawn attention for internal directives, with FOIA records showing instructions to staff on responding to social media critics.
Ransomware negotiation occupies a gray commercial space where private firms step between victims and criminal hackers. When federal charges of conspiracy to threaten confidentiality for extortion and interference with commerce enter the picture, that space collides with criminal law. The sealed Texas case and the unconfirmed link to ShinyHunters leave the full picture incomplete for now.
Taxpayers and lawful businesses deserve an FBI that pursues real threats to government systems and commerce without hesitation. The arrest of a professional ransomware negotiator on these charges puts that demand squarely in view.
