Edward "Ed" Dubrovsky, a 54 year old Canadian cybersecurity executive, built a career helping companies respond to ransomware attacks. He had been a managing director at the Canadian firm CYPFER from 2022 until resigning in November 2025 (his LinkedIn profile described him as a co-founder, which CYPFER disputed after his arrest), and was more recently associated with another Canadian firm, CyberSteward, which Politico reported is a trade name tied to CYPFER. Both firms offered to help breach victims negotiate with and pay cybercriminals. Dubrovsky also recently self-published a 252-page book, "Cyber Extortion Strategic Response," about handling ransomware incidents, and had posted on LinkedIn about attending the NetDiligence Cyber Risk Summit in Philadelphia with the CyberSteward team just days before his arrest.
Dubrovsky was arrested on October 8, 2026, in Pennsylvania, where he was attending that same cybersecurity conference, and charged with conspiracy to threaten to impair the confidentiality of information with intent to extort money, and with interference with commerce by threats (Hobbs Act extortion). He appeared in federal court in Philadelphia, where a magistrate judge ordered him transferred to the Eastern District of Texas, where the sealed complaint against him was filed. Prosecutors asked that he be held pending trial, and as of the most recent reporting he had not yet retained or been appointed an attorney.
His arrest came one day before FBI Director Kash Patel announced on social media that the bureau had arrested "another suspected co-conspirator" of the hacking group ShinyHunters, which breached the FBI's own jobs portal in September 2026 and stole sensitive personal data, including Social Security numbers and psychiatric records, on thousands of current and former FBI employees. The New York Times, citing people familiar with the matter, reported that the Canadian man arrested in Pennsylvania was considered a primary co-conspirator in that FBI hack. As of the available reporting, the FBI had not publicly confirmed that Dubrovsky is that suspect, the specific conduct underlying his extortion charges had not been made public, and the case files remained largely sealed. ShinyHunters is believed to have breached more than 140 organizations and extorted over $70 million from victims in the past year; a separate ShinyHunters suspect, Pepijn van der Stap, was arrested in the Netherlands the previous month.
