Dutch law enforcement officials have taken into custody a 24‑year‑old man from Amsterdam as part of a broader probe into the cyber‑crime outfit known as ShinyHunters. According to statements released by the Dutch National Police on September 28, the individual is suspected of heading the group that the United States Federal Bureau of Investigation (FBI) has linked to a high‑profile data breach earlier this year.
The breach exposed internal financial records showing that the popular online component of Grand Theft Auto (GTA Online) was pulling in more than one million dollars each day. The arrest was first reported by Rockstar Intel, a fan‑run news site that aggregates information about the Rockstar Games franchise, and subsequently echoed by Kotaku. While the police initially withheld the suspect's identity, Reuters later identified him as Pepijn van der Stap. Van der Stap is employed as the offensive cybersecurity lead at Neo Security, a boutique security firm based in Amsterdam.
His résumé includes prior convictions for offenses related to unauthorized computer access, and he reportedly joined Neo Security only this year. Despite his recent employment, the FBI maintains that he has been at the helm of ShinyHunters since 2025, a claim the group itself has publicly denied, accusing Dutch authorities of mishandling the investigation. ShinyHunters has built a reputation for targeting a wide array of high‑profile organizations. Over the past few years, the collective has been linked to more than one hundred intrusions affecting companies and institutions ranging from entertainment giants like Rockstar Games to ticket‑selling platforms such as Ticketmaster, and even to the FBI’s own networks.
In April, the group infiltrated Rockstar’s internal systems and attempted to extort the studio, threatening to dump sensitive data unless a ransom was paid. Rockstar refused to capitulate, and the hackers followed through on their threat, publishing a trove of documents that confirmed GTA Online’s daily revenue topped the $1 million mark.
The leak added to a string of recent security challenges for Rockstar. In August, another hacker collective known as CyberLeek released unauthorised gameplay footage of the yet‑unreleased GTA 6, prompting Take‑Two Interactive, Rockstar’s parent company, to issue subpoenas to major technology platforms including Microsoft, Discord, and X (formerly Twitter) in an effort to trace the source of the leak. The cumulative effect of these incidents has placed considerable strain on Rockstar’s internal security teams and has drawn heightened scrutiny from both law‑enforcement agencies and the gaming community. Following the Amsterdam arrest, Brett Leatherman, an assistant director with the FBI’s Cyber Division, issued a stark warning aimed at the remaining members of ShinyHunters.
In a public statement, Leatherman said, "Now, to the remaining members of ShinyHunters: You've heard about the arrest of your colleague. We're confident you've seen or heard things in recent days that the public has not. Other groups believed anonymity, or their friends, would protect them, and they were wrong.
Arrests have a way of changing who is willing to talk, and seized infrastructure has a way of showing us who's left. The longer you stay in this, the more we learn about you.
You know how to find us, and we know how to find you. I suggest you reach out first while the choice is still yours." The message was clearly intended to encourage any remaining operatives to surrender before further legal action could be taken against them. Beyond the immediate cyber‑security fallout, Rockstar is also contending with a separate, non‑technical dispute.
The studio is currently involved in an employment tribunal with the Independent Workers' Union of Great Britain (IWUGB). The case stems from the dismissal of 34 employees in October of the previous year, an action the union claims was retaliatory in nature, punishing staff for their involvement in union organising activities.
This labour dispute adds another layer of complexity to Rockstar’s public relations challenges, as the company must navigate both the fallout from the data breach and the scrutiny of its employment practices. The arrest of Pepijn van der Stap marks a significant development in the ongoing effort to dismantle ShinyHunters.
While the group has denied that van der Stap was its leader, the combination of Dutch police action and the FBI’s public outreach suggests that authorities are closing in on the network’s remaining members. Cyber‑security experts note that the takedown of a high‑profile figure within a hacking collective can disrupt operational capabilities, but they also caution that these groups often have decentralized structures that allow them to continue activities even after key arrests. In the broader context, the incident underscores the growing challenges faced by the video‑game industry in protecting proprietary data and financial information. As games become more lucrative and increasingly integrated with live‑service models, the incentive for criminal groups to target internal systems rises.
Companies like Rockstar are now forced to invest heavily in advanced threat detection, employee training, and incident response protocols to mitigate the risk of future leaks. For the gaming community, the revelation that GTA Online generates over a million dollars daily provides a glimpse into the massive scale of modern digital entertainment economies. It also raises questions about how such revenue streams are safeguarded and the potential impact of public disclosures on stock prices, investor confidence, and future development plans.
In summary, the apprehension of a young Dutch cybersecurity professional alleged to have led ShinyHunters represents a pivotal moment in the fight against cyber‑crime targeting the entertainment sector. While the full ramifications of the arrest are yet to be seen, the coordinated response from Dutch authorities and the FBI signals a determined effort to hold accountable those who compromise the privacy and financial integrity of major corporations. The ongoing legal battles, both in the realm of cyber‑security and labour relations, will likely continue to shape Rockstar’s strategy and public image in the months ahead.