OPINION
Edward Dubrovsky walked into the Philadelphia Cyber Risk Summit on Oct. 8 with his name on the sponsorship banner. His former company, Cypfer, was the event's largest sponsor. He'd co-authored a book on ransomware negotiation. He was, by every visible measure, exactly the kind of person you call at 2 a.m. when your network is down and someone is demanding eight figures to give it back.
The FBI arrested him before the conference ended.
Dubrovsky, 54, now faces federal charges — conspiracy to extort, interference with commerce by threats — connected to the ShinyHunters investigation. The core allegation: The man organizations paid to negotiate against ransomware actors may have been on their payroll.
That's not an individual misconduct story; that's a program failure.
The FBI Got Hit the Same Way
ShinyHunters has been running the same operation for years. Credential theft. SaaS compromise. Data exfiltration. Extortion. By FBI estimates, they've pulled in over $70 million doing it.
Their most damaging target wasn't a hospital or a bank. It was the FBI itself. An Accenture contractor running FBIjobs.gov had left a known Oracle PeopleSoft vulnerability unpatched.
ShinyHunters walked through it, moved laterally to AWS GovCloud, and exfiltrated somewhere between 2TB and 3TB of employee data — names, addresses, Social Security numbers, emergency contacts — including data from counterintelligence staff.