Edward Dubrovsky, 54, a Canadian ransomware-negotiation executive, was arrested in Pennsylvania on 8 October 2026 and is charged in a federal extortion case now sitting in the Eastern District of Texas [1][2][4]. The charges are allegations. He is presumed innocent.
Confirmed: the arrest and charges, from court records. Reported only: any link to ShinyHunters.
What the court records show
- Charges. “Conspiracy to threaten to impair the confidentiality of information with the intent to extort money”, and interference with commerce by threats, which the docket labels Hobbs Act extortion and conspiracy to commit it [1][4].
- Custody. A magistrate judge in Philadelphia ordered him moved to Texas. Prosecutors want him detained, and he remains in custody [3][4][5]. The complaint is sealed [1][3].
- Name. The Pennsylvania records spell it “Dobrovsky”. Outlets identify him as Dubrovsky and give his age from federal records [1][3].
What the charges mean
Extortion is demanding money under threat. Here the alleged threat concerns data. Conspiracy means agreeing with someone else to commit the offence. The Hobbs Act is a federal law against extortion that affects interstate commerce. That is TSN’s plain reading; only the sealed complaint shows the allegations.
What a ransomware negotiator does
Victims hire negotiators to deal with criminals who have stolen or locked their data. Dubrovsky’s book says “communicating with a criminal is not the same as negotiating a payment, and negotiating is not a commitment to pay” [1].
His role at CYPFER
CyberScoop calls him a former chief operating officer and founder of CYPFER [2]. A CYPFER spokesperson told Krebs he was not a founder but a managing director who resigned in November 2025 [1]. Politico, as relayed by BleepingComputer, says CyberSteward is a trade name used by CYPFER [4]. Krebs describes it as another firm; TSN could not resolve that.
The ShinyHunters link: reported, not confirmed
KrebsOnSecurity says sources linked the arrest to the ShinyHunters investigation. The New York Times reported an unnamed Canadian arrested in Pennsylvania on suspicion of assisting the group [1][5]. The FBI has not named him; it pointed CyberScoop to Director Kash Patel’s post, which names no one [2]. Politico said it was not yet clear [3]. Nextgov says his alleged conduct “has not been publicly established” [5]. TSN’s earlier report covers Patel’s announcement.
Responses
Dubrovsky could not be reached by Krebs. Neither he nor CYPFER replied to CyberScoop [1][2]. TSN found no statement from a lawyer.
What is not known
- What he is accused of doing, and whether it relates to the FBI breach.
- His plea, his lawyer, and the date of his detention hearing.
Sources
- KrebsOnSecurity, Brian Krebs, “FBI Arrests Executive at Ransomware Negotiation Firm”, 9 October 2026, updated 10 October (court-record details; CYPFER spokesperson; unnamed sources). https://krebsonsecurity.com/2026/10/fbi-arrests-founder-of-ransomware-negotiation-firm/
- CyberScoop, Greg Otto, “Canadian cybersecurity executive arrested in federal extortion case”, 10 October 2026. https://cyberscoop.com/edward-dubrovsky-cypfer-arrested-fbi-extortion-charges/
- Politico, John Sakellariadis, Josh Gerstein and Kyle Cheney, “Canadian cyber executive charged in federal hacking case”, 9 October 2026, updated 10 October (page blocked automated access; opening paragraphs read in search excerpts only). https://www.politico.com/news/2026/10/09/canadian-cyber-executive-charged-in-federal-hacking-case-01115649
- BleepingComputer, Lawrence Abrams, “Cyber exec arrested in case allegedly tied to ShinyHunters hackers”, 10 October 2026 (quotes the docket’s charge text; relays Politico on CyberSteward). https://www.bleepingcomputer.com/news/security/cyber-exec-arrested-in-case-allegedly-tied-to-shinyhunters-hackers/
- Nextgov/FCW, David DiMolfetta, “Cybersecurity executive who helped hacking victims arrested on federal extortion charges”, 10 October 2026. https://www.nextgov.com/cybersecurity/2026/10/cybersecurity-executive-who-helped-hacking-victims-arrested-federal-extortion-charges/416545/
