FBI Arrests Cybersecurity Executive Over Data Breach After Contractor Fails to Update Oracle HR Platform (cnn.com)
- Reference: 0186098418
- News link: https://it.slashdot.org/story/26/10/11/0157259/fbi-arrests-cybersecurity-executive-over-data-breach-after-contractor-fails-to-update-oracle-hr-platform
- Source link: https://lite.cnn.com/2026/10/09/politics/fbi-arrest-shinyhunters-hack
> The FBI arrested a Canadian cybersecurity executive and ransomware expert as part of the investigation of a damaging hack that exposed the sensitive data of current and former FBI employees, according to court documents and people familiar the investigation. Edward Dubrovsky was arrested in the Philadelphia area in recent days... Dubrovsky is facing charges related to extortion and making threats. He has been transferred to Texas's Eastern District for a scheduled detention hearing, according to court records and a law enforcement official.
>
> FBI Director Kash Patel announced the arrest on Friday but did not disclose where it occurred or what role the man is suspected of playing in the hack. Patel also didn't name Dubrovsky, but CNN confirmed the defendant is believed to be tied to the FBI hack through multiple people familiar with the investigation... A LinkedIn profile under Dubrovsky's name lists years of experience in the Canadian cybersecurity industry and describes Dubrovsky as a 'globally recognized cybersecurity expert.' An Ed Dubrovsky is also the author of a book on handling ransomware negotiations with cybercriminals...
>
> There has also been an inquest at the FBI over how such a critical security lapse happened. The FBI determined that a [2]contractor managing the bureau's jobs portal failed to update software "explicitly issued to secure the platform," [senior FBI cyber official, Brett Leatherman said last week]. The FBI has "removed the contractor," he said. The software in question is a human-resources platform made by Oracle, ShinyHunters has said. The hackers previously used a flaw in the software to attack targets in the education sector in May and June, according to Google's Threat Intelligence Group. But months later, the FBI contractor apparently still had not applied a security patch that was available for the software.
"The inmate locator at the U.S. Bureau of Prisons website reports that a 54-year-old Edward Dubrovsky is currently being held at a federal facility in Philadelphia," [3]reports security researcher Brian Krebs .
Thanks to long-time Slashdot reader [4]schwit1 for sharing the news.
[1] https://lite.cnn.com/2026/10/09/politics/fbi-arrest-shinyhunters-hack
[2] https://www.reuters.com/technology/accenture-contractor-removed-fbi-following-damaging-data-breach-sources-say-2026-10-06/
[3] https://krebsonsecurity.com/2026/10/fbi-arrests-founder-of-ransomware-negotiation-firm/
[4] https://www.slashdot.org/~schwit1
We need a modern version of Adm Hopper ... (Score:2)
> The software in question is a human-resources platform made by Oracle, ShinyHunters has said. The hackers previously used a flaw in the software to attack targets in the education sector in May and June, according to Google's Threat Intelligence Group. But months later, the FBI contractor apparently still had not applied a security patch that was available for the software.
We need a modern version of Admiral Grace Hopper to review and modernize government IT. This idiocy is likely the tip of the iceberg.
So the FBI's response to cybercrime is... (Score:2)
Blame Canada.
News media leaks and doxxes people now? (Score:3)
Is this considered normal and usual that the US news media doxxes potential suspects even before anything official has been published or a verdict has been found?
They seem to be able to get away with it too, and direct psychological and physical violence of insane pseudo-vigilante hate mobs like we saw with the holdout juror.
Time to fabricate evidence (Score:3)
A contractor, twice, failed to install updates. Who had the job of checking that the work had been done to specification? That's the problem with a government where no-one is accountable.
While Dubrovsky is accused of crimes, there is a disturbing abundance of silence on his part in the leak of data. Did Dubrovsky attempt to profit from crime that he did not commit? Frequently, such silence means the police/FBI have something to hide.
Just like cops (Score:2)
Study the bad guys, get a job interacting with illegal activities, and you too can become corrupt.
Re: (Score:3)
From reading the excerpt, it seems this was negligence though, not becoming the bad guy -- which requires malice as the main ingredient. More like being reckless/careless which requires stupidity as the main ingredient.
Re: (Score:2)
> From reading the excerpt, it seems this was negligence though, not becoming the bad guy -- which requires malice as the main ingredient. More like being reckless/careless which requires stupidity as the main ingredient.
From reading the summary it does not sound like the guy arrested was part of the negligence?
Or someone with an agenda infiltrating (Score:1)
> Study the bad guys, get a job interacting with illegal activities, and you too can become corrupt.
Or start out a bad guy, get a job in government, screw things up from the inside.