Edward “Ed” Dubrovsky, a cybersecurity executive who helped hacking victims recover from attacks, was arrested on federal extortion charges, according to court records cited by Nextgov/FCW’s report. The case may connect to the FBI’s investigation of ShinyHunters, but authorities have not publicly established Dubrovsky’s alleged role in the group’s intrusion.
Dubrovsky, 54, faces charges of conspiring to extort money by threatening to disclose stolen or hacked information and interfering with interstate commerce through extortion. The charges are allegations. His complaint remains sealed, leaving his specific alleged conduct undisclosed.
He appeared Thursday in federal court in Philadelphia. A magistrate judge ordered him transferred to the Eastern District of Texas, while prosecutors seek his detention pending trial. The source does not state a calendar date for the hearing.
What the Arrest Record Establishes
KrebsOnSecurity first identified Dubrovsky on Friday night, citing sources who linked the arrest to the ShinyHunters investigation. The New York Times had earlier reported that an unnamed Canadian man arrested in Pennsylvania was suspected of assisting the group.
ShinyHunters claimed responsibility for a September breach that exposed sensitive information about FBI employees. The complaint against Dubrovsky has not been made public, and the source says his specific conduct, including any role in the intrusion, has not been established. Those limits leave the suspected connection unresolved.
The arrest has drawn attention to Dubrovsky’s professional record in incident response and extortion advice. The source describes a career helping organizations navigate cyberattacks, while the criminal allegations concern an alleged effort to extort money. The public record described in the report does not explain how investigators connected the two.
Career Helping Hacking Victims
Dubrovsky joined CYPFER in 2022 to lead consulting and threat intelligence operations, then served as chief operating officer and managing partner. CYPFER described him as having three decades in cybersecurity and technology and said he had helped thousands of organizations recover from attacks.
Before CYPFER, he headed cyber breach response at Cytelligence, which Aon acquired in 2020. A York University biography identified him as Cytelligence’s chief operating officer and Aon’s Canadian cyber leader. He also taught courses in cybersecurity engineering and security assessment and testing.
More recently, Dubrovsky promoted work with CyberSteward, including ransomware negotiations and extortion advisory services. In a LinkedIn post ahead of the NetDiligence Cyber Risk Summit in Philadelphia this month, he said he planned to attend with the company’s team. These professional details describe his public work; they do not establish the truth of the charges.
FBI Breach Investigation Continues
FBI Director Kash Patel said Friday that the bureau had arrested another suspected ShinyHunters co-conspirator, without naming that person or disclosing charges. Canadian authorities separately acknowledged that a Canadian had been arrested in the United States in connection with the hack. The source does not say whether that person is Dubrovsky.
The FBI is also dealing with the breach’s effects. Stolen information included employees’ addresses, phone numbers, details about spouses and medical information, as well as information about intelligence and surveillance assignments, Nextgov/FCW previously reported. The FBI has since removed a contractor working for Accenture.
The exposure carries counterintelligence risks, the report says: if the records were sold or distributed, foreign intelligence services could use them to identify personnel working on sensitive matters or exploit personal information. The court proceedings and any public disclosure of the sealed complaint may clarify the allegations. Until then, Dubrovsky’s specific role in the breach remains unestablished.
Block Editorial has also covered the FBI data breach and the wider cybersecurity threat picture in its reporting on the FBI breach and Cybersecurity Awareness Month. Its coverage of Ohio cybersecurity leaders looks at the people working in the field.
