Jordan detained an alleged ShinyHunters member tied to the FBI breach, and sources say he is helping investigators find the rest.
Story Snapshot
- Jordan detained Saif al-Din Khader, linked to the hacker alias “Rey,” this week.
- Two sources say Khader is cooperating with the Federal Bureau of Investigation (FBI) to identify other suspects.
- U.S. officials told outlets that ShinyHunters claimed the recent defacement of the FBI jobs site.
- Jordan publicly confirmed an arrest tied to the case but did not name the suspect.
What investigators say happened this week
Reuters reported that Jordanian authorities detained Saif al-Din Khader, alleged to be the hacker “Rey,” in connection with ShinyHunters activity tied to the FBI jobs site breach. Two sources told Reuters that Khader was taken into custody on Tuesday and is now assisting investigators. CBS News, citing U.S. officials, said a suspected ShinyHunters member detained in Jordan is cooperating with the probe into the group’s claims and actions against the FBI’s website. The FBI declined detailed public comment in these reports.
The National, a United Arab Emirates-based outlet, reported that Jordan confirmed the arrest of a suspected ShinyHunters member after the FBI data theft, while withholding the person’s name. Together, these accounts describe a fast-moving, cross-border case. They also show how early facts often come from unnamed sources before court filings appear. For now, the on-record pieces are detention in Jordan, claimed links to ShinyHunters, and cooperation with investigators, according to people briefed on the matter.
Why this matters for public trust and safety
Americans watched a group boast that it defaced an FBI website and claimed data on employees. That strikes at basic confidence that the government can guard its own house. CBS News reported that investigators tied the Jordan detention to the same crew that took credit for the defacement last month. When criminals punch at key institutions, everyday people fear that their own data and services are next. Rapid coordination across borders is the only way to stop a scattered network like ShinyHunters.
People on the right and left often agree that powerful insiders protect themselves while the rest face the fallout. A suspected hacker’s quick detention abroad and reported cooperation with the FBI may look like overdue action. But the secrecy around cyber cases also fuels doubts. Officials rarely share details until charges land. That caution protects cases, yet it can feed the sense that the system speaks in riddles while citizens deal with real risk and rising cyber costs.
How the cross-border playbook usually unfolds
Major cyber cases often begin with sourced reporting that names a suspect, followed by signals of an active probe, and only later by arrests, warrants, or extraditions. The ShinyHunters investigation already spans several countries, which tracks with research that the group is a loose, international collective rather than a tight command structure. Jordan’s confirmation of an arrest, even without a name, fits the early stage of that pattern while partners sort out legal steps and evidence sharing.
Saif al-Din Khader, a key member of the ShinyHunters hacking group known by his alias "Rey", was detained in Jordan on September 29, 2026, and is currently cooperating with the FBI.
According to sources familiar with the matter, Khader is granting investigators access to his…
— jinyoJr 👊🏾 (@JinyoJr) October 4, 2026
For readers, the bottom line is simple. Authorities say they have a lead who may point them to others. If that help is real, investigators could map the network faster and warn targets sooner. If claims shrink under legal review, expect later filings to narrow the story. Until then, protect yourself like big targets do: enable multi-factor logins, use strong passwords, and be wary of phishing. Government can and should do more, but each person can reduce risk today.
Sources:
cbsnews.com, reuters.com, internazionale.it
© boldfrontnews.com 2026. All rights reserved.
