Key Notes
- Dutch police arrested a 24-year-old Amsterdam resident on September 15, while the FBI alleges a leadership role in ShinyHunters and the group denies any association.
- The April Rockstar breach exposed reported GTA Online and Red Dead Online revenue figures after an extortion demand, but police have not publicly tied this suspect to that specific intrusion.
- The FBI alleges more than 140 affected organizations and at least $70 million in extortion payments since last year, as Dutch investigators examine seized devices and consider further arrests.
Dutch police have arrested a 24-year-old Amsterdam resident suspected of involvement in ShinyHunters, the hacking and extortion group associated with April’s Rockstar Games data breach. That incident exposed reported revenue figures for GTA Online and Red Dead Online after an attempt to pressure the publisher into paying a ransom.
The arrest happened on September 15, according to a police statement published on September 29. The FBI describes the man as an alleged leader, while Dutch authorities say he is suspected of participating in a criminal organization. Their announcement does not identify him as the person who carried out the Rockstar intrusion.
A Suspect in a Wider Investigation
The Dutch High Tech Crime team is investigating ShinyHunters under the authority of the national public prosecutor. Officers seized storage devices for examination, and police have not ruled out further arrests. A Rotterdam court ordered the suspect to remain in pretrial detention for another 90 days on September 29.
Police also disclosed a separate suspicion of attempted solicitation of two murders, arising from information found on his laptop. They explicitly say that allegation is unrelated to the ShinyHunters investigation. None of these allegations amounts to a conviction.
ShinyHunters disputes the authorities’ account. In a statement seen by Reuters and cited in GamesRadar’s report, the group denied that the arrested man had any association with it. Its denial leaves his alleged role contested while investigators examine the seized material.
The Rockstar Leak Exposed Business Data
For gaming readers, the connection is the April attack on Rockstar. ShinyHunters threatened to release stolen information unless the studio paid, then published material after Rockstar refused, as GamesIndustry.biz reported. The financial information offered an unusual view into the business behind two major online games.
Contemporary coverage put GTA Online’s average weekly revenue at approximately $9.6 million between September 2025 and April 2026. Red Dead Online’s reported average exceeded $500,000 a week over a different period, June 2024 to April 2026. Those are figures attributed to leaked records, rather than audited public disclosures, and their different reporting windows limit a direct comparison.
Rockstar said at the time that the third-party breach involved limited company information and had no impact on its organization or players. The September arrest announcement supplies no new indication that player accounts were compromised in that incident.
The FBI Calls on Other Members to Come Forward
In its video announcement, FBI Cyber Division assistant director Brett Leatherman alleged that the suspect and his co-conspirators had breached more than 140 organizations since last year and received at least $70 million in extortion payments. He described third-party vendors and cloud platforms as recurring targets.
Leatherman urged remaining ShinyHunters members to contact investigators voluntarily, arguing that arrests can produce cooperating witnesses and seized infrastructure can reveal other participants. The announcement did not identify anyone who had responded to that appeal.
The case brings renewed attention to Rockstar’s handling of confidential business information as it prepares its next major release. We previously covered the studio’s GTA 6 preorders announcement; this investigation adds no confirmed change to those release plans. Its immediate significance is an arrest in a broader alleged extortion network, with the suspect’s precise involvement still to be established.
