FBI Arrests Another ShinyHunters Suspect, the Group Behind April's Rockstar Breach
The FBI has arrested a third suspect tied to ShinyHunters, the group that claimed an attack on Rockstar in April. No authority has linked him to that breach or to this year's GTA 6 leaks, and the trial of Arion Kurtaj, the 2022 hacker, is a separate case.
- Arrests
- 3
- Latest
- OCT 9, 2026
- Rockstar breach
- APRIL 2026
- Kurtaj trial
- NOV 9, 2026
- Confirmed
- Unconfirmed
What these labels mean
- Confirmed
Confirmed means the information comes from its owner: the studio, publisher, manufacturer or platform (Rockstar, Take-Two, Sony, Elgato, YouTube…).
- Unconfirmed
Unconfirmed is everything else: media reports, leaks, estimates, community reconstructions and our own deductions. A rumor remains unconfirmed even when many outlets repeat it.
FBI Director Kash Patel announced on October 9 the arrest of another person tied to ShinyHunters, the cybercrime group that claimed an attack on Rockstar Games in April. It’s the third known arrest in the investigation into the theft of data from the FBI’s jobs portal. No authority has linked this suspect to the Rockstar breach or to this year’s GTA 6 leaks. The Hacker News
What the FBI announced
ConfirmedPatel described the suspect on X as a “suspected co-conspirator” of ShinyHunters, the group the FBI holds responsible for the FBIjobs.gov incident. The FBI hasn’t named the person or made charges public. According to The New York Times and CBS News, cited by The Hacker News, the suspect is a Canadian citizen arrested in Pennsylvania. The two previous arrests took place in the Netherlands in mid-September and in Jordan on September 29. The Hacker News ABC News 4
Why Rockstar is part of this story
ConfirmedIn April, ShinyHunters claimed an attack on Rockstar and threatened to publish the data unless the company paid. The group said it got in through Anodot, a third-party cloud cost monitoring service. Rockstar confirmed at the time that “a limited amount of non-material company information was accessed” and that the incident had no impact on players. There’s no confirmation that any GTA 6 material was taken. Push Square
What nobody has proven
UnconfirmedSome GTA accounts have presented the suspect as one of the people behind the Rockstar attack, but neither the FBI nor any other authority has said so. There’s also no arrest tied to Cyberleek, the source of the August and October gameplay leaks, whom Rockstar and Take-Two are still pursuing. These are separate cases that many headlines are lumping together as “the GTA 6 hackers.” What Cyberleek leaked is covered in the 25-minute GTA 6 leak.
The 2022 hacker goes on trial November 9
ConfirmedThe week’s other case involves Arion Kurtaj, the Lapsus$ member behind the 2022 breach that exposed GTA 6 development footage. His trial opens November 9 at Woolwich Crown Court in London, ten days before launch, according to Red Lion Chambers, which represents him. Notebookcheck In 2023 a jury found he had carried out the acts, but he was deemed unfit to stand trial and placed in a secure hospital. TechRadar This trial has nothing to do with the FBI arrests.
Sources
The Hacker News — FBI arrests another ShinyHunters suspect
ABC News 4 — Arrest in the Netherlands
Push Square — Rockstar confirms the April breach
Notebookcheck — Arion Kurtaj trial date
Last verified: October 10, 2026.