Teen Hacker Arrested in Jordan for FBI Data Breach
Translated & summarized from Kikar HaShabbat by baba
Jordanian authorities arrested a 16-year-old hacker known as "Rey" in Amman, believed to be part of the "Scattered LAPSUS$ Hunters" collective. The group claimed responsibility for a September 2026 breach of the FBI's recruitment website, stealing terabytes of data. The arrested teen is reportedly cooperating fully with the FBI, providing critical information to identify other network members. This arrest is part of an ongoing international effort against sophisticated hacking groups.
The story in 6 lines · by baba
- A 16-year-old hacker known as "Rey" was arrested in Amman, Jordan, for alleged involvement in an FBI data breach.
- The hacker is believed to be a key operator in the "Scattered LAPSUS$ Hunters" collective, which merged ShinyHunters, Scattered Spider, and LAPSUS$.
- The group claimed responsibility for breaching the FBI's recruitment website in September 2026, stealing terabytes of data.
- The arrested teen is reportedly cooperating extensively with the FBI and international law enforcement.
- His cooperation is considered critical for identifying other members of the distributed cybercrime network.
- The arrest follows the apprehension of another key suspect, Pepijn van der Stap, in the Netherlands.
A 16-year-old hacker from Amman, Jordan, who called himself "The King" and operated under the alias "Rey," has been arrested by Jordanian authorities. He is believed to be a prominent operator within the "Scattered LAPSUS$ Hunters" collective, which merged three hacking groups: ShinyHunters, Scattered Spider, and LAPSUS$. This group specialized in social engineering and hacking technology organizations, with past victims including Jaguar Land Rover and Rockstar Games. In September 2026, the group claimed responsibility for breaching the FBI's official recruitment website, FBIJobs.gov, allegedly stealing 2-3 terabytes of data and sending lists of employee names to journalists. The FBI has not officially commented on the arrest but has indicated an aggressive, offensive cyber investigation is underway in cooperation with international partners. Sources close to the investigation revealed that Khader is cooperating fully with the FBI and other international law enforcement agencies, providing access to his devices and communications, which investigators describe as "critical" to identifying other members of the distributed crime network. The arrest followed closely on the heels of another significant blow to the group, the arrest of a key suspect, Pepijn van der Stap, known as "Umbreon," in the Netherlands two weeks prior. This operation is part of a long-standing cyber war between the FBI and global hacking communities, which has seen a rise in young, English-speaking groups using social engineering tactics. While Israel faces daily cyber threats, primarily from Iranian intelligence, the article notes that groups like ShinyHunters often emerge from democratic countries. The FBI, which released its public cyber strategy in September 2026, has warned hackers that there is no safe haven. Khader's cooperation is seen as crucial in mapping the crime collective's structure, but questions remain about whether he had truly retired from criminal activity in 2025 as he claimed, and if his cooperation will lead to a wider collapse of the network. His story highlights a broader, concerning trend of brilliant young individuals engaging in cybercrime, causing significant financial damage.