FBI Arrests Canadian Cybersecurity Executive in Employee Data Hack
The FBI arrested Edward Dubrovsky, a Canadian cybersecurity executive and ransomware expert, in connection with an investigation into a hack that exposed data…
The FBI arrested a canadian cybersecurity executive in the Philadelphia area in connection with a hack that exposed sensitive data on current and former bureau employees. Edward Dubrovsky, a ransomware expert, faces charges related to extortion and making threats, according to court documents and people familiar with the investigation.
Dubrovsky appeared in federal court in Philadelphia on Thursday, where a magistrate judge appointed a federal public defender to represent him. He has since been transferred to Texas’s Eastern District for a scheduled detention hearing, court records and a law enforcement official said.
The arrest adds a suspect to an investigation into a breach that revealed personal data belonging to thousands of current and former FBI employees. The identities of personnel in sensitive units focused on China and Russia were also exposed, according to people who have seen the data.
FBI has not detailed suspected role
FBI Director Kash Patel announced an arrest on Friday but did not identify Dubrovsky or say where the arrest took place. He described the person as another suspected co-conspirator of the cybercriminal group believed responsible for the hack.
“Earlier this week, our agents in the field arrested another suspected co-conspirator” of the group, Patel said. CNN confirmed through multiple people familiar with the investigation that Dubrovsky is believed to be connected to the breach. A federal law enforcement official confirmed the spelling of his name; original court documents misspelled his last name.
Dubrovsky did not immediately respond to a request for comment. The public defender’s office in Philadelphia also did not respond, CNN reported. The FBI declined to comment on his arrest.
The investigation is ongoing. Sources told CNN that authorities are looking into other people believed to have been involved.
Hack exposed employee information
ShinyHunters claimed responsibility last month for breaking into an FBI jobs portal and accessing personal data on thousands of current and former employees. The group used its dark-web site to demand that the FBI amend an earlier advisory describing its alleged extortion tactics. The group said it was “offended” by the bureau’s characterization.
Cybersecurity professionals viewed the demand as an implicit threat to release the stolen data. The hackers later said leaking the information had never been their intention.
The breach prompted scrutiny inside the FBI over how the security lapse happened. The bureau determined that a contractor managing the jobs portal failed to update software, according to CNN’s account. Some FBI employees also felt the security resources offered to breach victims were inadequate, CNN previously reported.
That response has direct implications for employees whose information was exposed, particularly those working in sensitive units. The data could identify personnel in areas the sources describe as focused on China and Russia. The FBI has issued public updates as it investigates the breach and addresses criticism over its handling.
Authorities pursue other suspects
The arrest follows action against another suspected ShinyHunters figure. Last week, the FBI said Dutch authorities had arrested “one of the alleged leaders” of the group.
FBI senior cyber official Brett Leatherman addressed the group in a video posted after that arrest. “Arrests have a way of changing who is willing to talk and seized infrastructure has a way of showing us who is left,” he said. Leatherman urged those involved to contact authorities, warning: “The longer you stay in this, the more we learn about you.”
A LinkedIn profile under Dubrovsky’s name lists years of experience in Canada’s cybersecurity industry and describes him as a “globally recognized cybersecurity expert.” An Ed Dubrovsky is also identified as the author of a book about negotiating with cybercriminals over ransomware.
Dubrovsky is awaiting a detention hearing in Texas’s Eastern District.
Source: cnn.com
