A Canadian cybersecurity executive who built a career helping organizations recover from cyberattacks has been arrested on federal extortion charges, a case that may be linked to the FBI’s pursuit of the ShinyHunters hacking group that pilfered troves of bureau employee data.
Edward “Ed” Dubrovsky, 54, faces charges of conspiring to extort money by threatening to disclose stolen or hacked information and interfering with interstate commerce through extortion, according to court records. He appeared Thursday in federal court in Philadelphia, where a magistrate judge ordered him transferred to the Eastern District of Texas. Prosecutors are seeking his detention pending trial.
KrebsOnSecurity first identified Dubrovsky on Friday night, citing sources linking his arrest to the ShinyHunters investigation. The New York Times had earlier reported that an unnamed Canadian man arrested in Pennsylvania was suspected of assisting the group, which claimed responsibility for a September breach exposing sensitive information about FBI employees.
The complaint detailing the allegations against Dubrovsky remains sealed. His specific alleged conduct, including any role in the FBI intrusion linked to ShinyHunters, has not been publicly established.
The arrest brings scrutiny to an executive whose professional reputation rested on helping victims navigate cyber incidents. Dubrovsky held leadership positions at incident-response companies, taught cybersecurity courses and recently published a book about how organizations should handle extortion incidents.
He joined CYPFER in 2022 to lead consulting and threat intelligence operations and later served as its chief operating officer and managing partner. The company’s announcement described him as a veteran of three decades in cybersecurity and technology who had helped thousands of organizations recover from attacks and advised executives, lawyers and insurance carriers.
Before that, Dubrovsky headed cyber breach response at Cytelligence, which Aon acquired in 2020. A York University biography identified him as Cytelligence’s chief operating officer and Aon’s Canadian cyber leader. He also taught courses in cybersecurity engineering and security assessment and testing.
More recently, Dubrovsky publicly promoted his work with CyberSteward, including ransomware negotiations and extortion advisory services. In a LinkedIn post ahead of the NetDiligence Cyber Risk Summit in Philadelphia this month, he said he planned to attend with the company’s team.
FBI Director Kash Patel announced Friday that the bureau had arrested another suspected ShinyHunters co-conspirator, without naming the person or disclosing charges. Canadian authorities separately acknowledged that a Canadian had been arrested in the United States in connection with the hack.
The bureau is still confronting the fallout from the intrusion. Stolen information included employees’ addresses, phone numbers, details about spouses and medical information, as well as information about intelligence and surveillance assignments, Nextgov/FCW previously reported. The FBI has since removed a contractor working for Accenture after the breach.
The exposure carries serious counterintelligence risks because those records, if sold or distributed, could help foreign intelligence services identify personnel working on sensitive matters or exploit personal information about them.
