Jordan detained a suspected ShinyHunters member tied to the FBI breach, and sources say he is now helping investigators find the rest.
Story Snapshot
- Jordan detained Saif al-Din Khader, linked to the alias “Rey,” this week.
- Sources say he is cooperating with the Federal Bureau of Investigation (FBI) and partners.
- Officials say the case connects to the recent defacement of the FBI jobs site.
- Jordan publicly confirmed an arrest tied to ShinyHunters, without naming the suspect.
What Investigators Say Happened
Reuters reported that Jordanian authorities detained Saif al-Din Khader this week, and two sources said it happened on Tuesday. The reporting links Khader to the online alias “Rey.” Those sources also said he is now helping the Federal Bureau of Investigation and other agencies find more members of the ShinyHunters group. The FBI did not comment on details of the case. The report anchors the arrest to the broader probe into a breach and site defacement claim targeting the FBI.
CBS News, citing United States officials, said a suspected ShinyHunters member was detained in Jordan and is cooperating with investigators. The coverage ties the detention to last month’s defacement of the FBI’s jobs website and the group’s claim that it stole data on bureau employees and applicants. The report said Jordanian authorities detained Khader this week, aligning with the timeline described by other outlets. The FBI continues to investigate the breach claims and the site disruption.
Confirmation From Jordan And The Identity Question
Jordan’s government confirmed it arrested a suspect linked to ShinyHunters after the FBI data theft claims, but it did not release the person’s name. That official statement matches outside reporting that Jordan is holding a suspect, while Reuters’ sources identify the person as Khader, known as “Rey.” This pattern is common in cross-border cyber cases, where public naming often comes from media while governments speak more cautiously about identity early on.
Tech and security trade press echoed the same core facts. BleepingComputer reported that a suspected ShinyHunters member, using the alias “Rey,” was detained in Jordan and is working with the FBI to find others in the group. The outlet attributed the identity details and cooperation claims to Reuters and people familiar with the matter. The trade coverage helps show consensus across multiple publications on the detention and alleged cooperation.
Why This Matters For Everyone
The case shows how cybercrime now crosses borders and tests trust in public institutions. People on the right see a federal government that fails to protect core systems while spending big. People on the left see growing digital risks that can hurt workers and widen gaps. Both worry that powerful insiders face few real consequences when systems break. A foreign detention, anonymous sourcing, and quiet official lines can feed a sense that the truth is gated and slow to reach the public.
Saif al-Din Khader, a key member of the ShinyHunters hacking group known by his alias "Rey", was detained in Jordan on September 29, 2026, and is currently cooperating with the FBI.
According to sources familiar with the matter, Khader is granting investigators access to his…
— jinyoJr 👊🏾 (@JinyoJr) October 4, 2026
At the same time, cooperation between Jordan and the United States shows how hard cases move forward when governments work together. If the suspect is indeed helping map the group, that could speed arrests and limit harm. Still, the facts will not be final until charges, court filings, or extradition steps appear. For now, the strongest confirmed points are the detention, the tie to ShinyHunters, and multiple reports that the suspect is aiding the probe.
Sources:
cbsnews.com, reuters.com, internazionale.it
