ShinyHunters hacker in FBI data theft detained in Jordan, cooperating with bureau, sources say

Read the original at The Straits Times ↗
The Straits Times · collected 2026-10-03 · by The Straits Times

Quick Summary

A key member of the ShinyHunters hacking group, which claims to have stolen data on all FBI employees, was detained in Jordan this week. Sources say Saif al-Din Khader, also known by his hacker nickname Rey, is cooperating with the FBI and international law enforcement to identify other hackers within the group. The detention occurred on September 29, and Khader’s cooperation could help authorities locate additional members of ShinyHunters responsible for the theft.
Written locally by qwen2.5:14b on 2026-10-03, using this article's own text rather than the other coverage of the same event (that is the story summary below).

AI analysis runs on qwen2.5:14b, locally

Story summary

Saif al-Din Khader, a suspected member of the ShinyHunters hacking group, was detained by Jordanian authorities this week. ShinyHunters claims to have stolen data on every FBI employee and has been linked to several high-profile cyber incidents. Sources say Khader is cooperating with the FBI and other global law enforcement agencies to identify his fellow hackers. The FBI declined to comment specifically but stated they are aggressively investigating the case, working with partners internationally to arrest those involved. Reuters reported that Khader was taken into custody on September 29, though details of his detention and current location remain unclear. CBS News noted that ShinyHunters claimed last month to have stolen up to 3 terabytes of data related to FBI workers, highlighting the scale of the breach and its potential consequences for employee privacy and security.

Written for “ShinyHunters Hacker Detained” on 2026-10-05, grounded in this article and the 3 other(s) covering the same event.

Signals How these are calculated →

Claims extracted
19
claim-shaped sentences
Uncertain
26%
5 of 19 hedged
Leaning
not political
takes no side on a contested political question
Correction & hedging signals
59.1
corrections and hedging in what we collected; not a measure of accuracy
Outlets on this story
4
Technology
Narrative spread
1
articles carrying this framing
Analyzed 2026-10-03 · how these are computed

Story

📰 ShinyHunters Hacker Detained
Technology · 4 article(s) covering the same event. See how they differ ↓

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Compared with similar articles

This article reads unscored and hedges 26% of its claims. Each row says how that neighbour differs.
The Straits Times · 0.99 cosine similarity
⚖️ leaning not scored 🔴 44% hedged 4 of 9 📰 publisher trust 59
“Both articles describe the detention of Saif al-Din Khader, a member of ShinyHunters hacking group, in Jordan and his cooperation with the FBI, referring to the same specific incident.”
Times of India · 0.98 cosine similarity
⚖️ leaning not scored 🔴 25% hedged 2 of 8 📰 publisher trust 59
“Both articles report on the detention of Saif al-Din Khader, a member of ShinyHunters hacking group, in Jordan and his cooperation with FBI to identify other hackers.”
CBS News · 0.94 cosine similarity
⚖️ leaning not scored 🔴 33% hedged 4 of 12 📰 publisher trust 66
“Both articles describe the detention of Saif al-Din Khader by Jordanian authorities and his cooperation with the FBI, relating to a data theft incident involving ShinyHunters.”
NBC News
⚖️ leaning not scored 🔴 30% hedged 9 of 30 📰 publisher trust 95
“The articles describe different arrests of ShinyHunters members in separate locations (Netherlands and Jordan) on different dates.”
NPR
⚖️ leaning not scored 🔴 33% hedged 9 of 27 📰 publisher trust 60
“Article A discusses the FBI's response to the data theft and their pursuit of ShinyHunters, while Article B reports on a specific arrest in Jordan and cooperation with the FBI.”

Publisher

The Straits Times · 1905 article(s) · 3 correction(s) detected
Running correction rate · 3 correction(s)
2026-10-04
Tennessee prison chief resigns after failed execution
2026-10-03
US prison chief resigns after failed execution of death row inmate Christa Pike
2026-09-13
Russia hits Ukrainian-Polish border area, Kyiv says

Who wrote this

The Straits Times
1311 article(s) here · 1 carrying a prediction
🔮 Britain set to levy tariffs on Chinese electric cars: Report AI generated
🔮 “I wouldn’t take a trade of saying, ‘We’ll make sure there’s no major hacks, there’s no misuse of this technology, there’s zero scams, there’s zero all the other bad things that will happen,’“ Altman said.
🔮 Austrian government's No. 2 figure says he will step down VIENNA, Oct 4 -
🔮 Ukrainian President Volodymyr Zelenskiy said on Sunday he believed Russia may have shared jet-drone technology with its longstanding ally North Korea.
🔮 A committee of the Mecca defence pact between Turkey, Saudi Arabia and Pakistan will hold talks in Riyadh on Monday, with Turkish ministers among those attending, the Turkish foreign ministry said on Sunday.
🔮 “The chain of failures that preceded the incident could have led to a disaster of historic proportions, and this is how an Israeli prime minister responds?” Lapid wrote on X. “Just as Netanyahu escaped an investigation into the October 7 massacre, he is now running away again,” he added.
🔮 DUBAI, Oct 4 - Iran's Oil Minister Mohsen Paknejad has resigned and Hamid Bovard, chief executive of the government-owned National Iranian Oil Company, will be in charge of the ministry as acting minister, state media said on Sunday, without providing a reason for the resignation. Mohsen Paknejad has been the oil minister of the OPEC member country since August 2024 and resigns as the seven-month war between Iran and the US puts pressure on the country's economy.
2026-10-04 · assertive framing · Iran's oil minister resigns, no reason given
🔮 "The Green Party has made antisemitism party policy and become a racist party," the Movement for Progressive Judaism said, adding that the support of some Jews for the motion did not mean it would not be used to discriminate against others.
🔮 Germany will not be intimidated into dropping its support for Ukraine, Chancellor Friedrich Merz said on Oct 4 as he announced a further €1 billion (S$1.4 billion) in military aid during a visit to Kyiv marked by Russian drone attacks.
🔮 According to the motion, Zionism would be “treated as any other form of racism” and the party supports the establishment of a “single democratic Palestinian State in all of historic Palestine”.
2026-10-04 · assertive framing · UK Green party adopts ‘Zionism is racism’ policy
Also by The Straits Times
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 1311 articles by The Straits Times →

Topics

FBI Jordan Reuters ShinyHunters WASHINGTON

Subjects

FBI ORG · 11× ShinyHunters ORG · 8× Reuters ORG · 7× Khader PERSON · 4× Jordan GPE · 2× Chinese NORP · 1× Jordanian NORP · 1× Rey PERSON · 1× Saif al-Din Khader PERSON · 1× WASHINGTON GPE · 1×

Narrative

A Reuters analysis of a sample of the data shared by ShinyHunters revealed that the data contained extensive personally identifiable information of FBI employees, sensitive job role information, and psychiatric and medical information.
framing: mixed · carried by 1 article(s) · first seen 2026-10-03
🔮 Reuters could not immediately determine the circumstances of Khader’s detention or his current whereabouts.

Claims (19 extracted, 5 hedged)

ShinyHunters hacker in FBI data theft detained in Jordan, cooperating with bureau, sources say AI generated asserted
sources → detain → bureau
A key member of the ShinyHunters hacking group, which claims to have stolen data on every FBI employee, was detained this week in Jordan, three people familiar with the matter told Reuters. uncertain
people → claim → Reuters
Two of the sources said he was cooperating with the FBI to identify his fellow hackers. asserted
he → say → hackers
Saif al-Din Khader was detained by Jordanian authorities, the three sources said. asserted
sources → detain → authorities
Two of them said he was taken into custody on Sept 29. asserted
he → say → Sept
Reuters could not immediately determine the circumstances of Khader’s detention or his current whereabouts. uncertain
Reuters → determine → detention
Two sources said that he is helping the FBI and global law enforcement locate the other hackers in the group. asserted
FBI → say → group
The FBI declined to comment on any specific arrest or activity abroad but said that the bureau "continues to aggressively investigate the recent cyber incident allegedly involving ShinyHunters, having already worked with partners to arrest multiple subjects - and we will spare no resource in bringing each of the responsible individuals to justice." Reuters’ attempts to reach Khader and members of his family over the past week and a half have been unsuccessful. uncertain
attempts → decline → week
The prolific cyber extortion group, which has a long history of targeting major corporations around the world, is believed by experts to consist mainly of young, English-speaking hackers focused on data theft and extortion. asserted
which → have → theft
Their theft of what they claim are mountains of data on every single FBI employee has drawn comparisons to the allegedly Chinese-linked intrusion at the US Office of Personnel Management in 2015, which compromised sensitive details on millions of Americans who had been vetted for security clearances. uncertain
who → claim → clearances
A Reuters analysis of a sample of the data shared by ShinyHunters revealed that the data contained extensive personally identifiable information of FBI employees, sensitive job role information, and psychiatric and medical information. asserted
data → share → employees
Khader's cooperation with investigators could be critical to helping contain - or at least understand - the damage. uncertain
cooperation → help → damage
One source said he was walking investigators through his electronic devices and digital correspondence to help the FBI locate his cohorts. asserted
FBI → say → cohorts
"His cooperation is critical to ongoing efforts to arrest these hackers," the source told Reuters. asserted
source → arrest → Reuters
There have been hints for days that ShinyHunters was experiencing disruption following the announcement of its break-in at the FBI. asserted
ShinyHunters → experience → FBI
Beginning on Sept 29, Reuters was unable to reach ShinyHunters through the online account it previously used to communicate with journalists. asserted
it → begin → journalists
Then, on Sept 30, the group’s dark web site, where it had previously posted threats to the FBI, disappeared. asserted
it → post → FBI
The bureau’s director, Kash Patel, has been hinting at more arrests following the announcement that another alleged ShinyHunters member, Pepijn van der Stap, had been detained in the Netherlands. asserted
member → hint → Netherlands
“FBI teams are working new leads RIGHT NOW,” Patel said on Sept 30 in a message posted to X. “More arrests are on the table.” asserted
arrests → work → table
💬Give feedback
🕘History 🎫Support