Cybersecurity executive arrested on extortion charges
Edward Dubrovsky, a former managing director of Canadian firm Cypfer, was arrested Oct. 8; anonymous sources link him to ShinyHunters and the FBI has not confirmed it.
Court records cited by KrebsOnSecurity place the arrest of Edward Dubrovsky, a 54-year-old Canadian, on Oct. 8, 2026, in Pennsylvania. The case appears on CourtListener as United States v. Dobrovsky, with a different spelling of the surname. A notice dated Oct. 9 moved it to the Eastern District of Texas, and a later order indicates he remains in custody.
According to BleepingComputer, he is accused of conspiring to threaten to damage the confidentiality of data in order to obtain money, and of extortion under the Hobbs Act, which punishes interference with commerce through threats. These are accusations, not a conviction. The complaint is sealed. Krebs could not reach Dubrovsky for his side of the story.
The link to ShinyHunters, a group known for stealing data from web applications and cloud accounts to extort victims, comes from sources that neither outlet names. Krebs says the FBI's investigation of that group is centered in Texas, but does not confirm a direct connection to Dubrovsky, and the FBI declined to comment.
A Cypfer spokesperson told Krebs that Dubrovsky was a managing director who resigned in November 2025, and that he was not a founder, as his LinkedIn profile says. A Krebs source says his firm negotiated with criminal groups in ransomware cases. Ransomware is malware that encrypts data to demand a payment.
The case points to a little-seen practice: firms that mediate between victims and extortionists. There is no detail on victims or on the data stolen. A statement from the FBI or the Justice Department confirming or ruling out the link is still missing.
