Dutch Police Arrest Alleged ShinyHunters Leader Behind April Rockstar Breach

Dutch police announced on September 28, 2026 the arrest of a 24-year-old man from Amsterdam, identified by Reuters as Pepijn van der Stap, in connection with the April 2026 data breach of Rockstar Games. The FBI alleges van der Stap has been one of the leaders of ShinyHunters, a prolific hacking and extortion collective, since at least 2025 — a claim that cuts against his public profile as an offensive cybersecurity lead at a firm called Neo Security.

The April breach saw ShinyHunters infiltrate Rockstar's systems and demand a ransom. When Rockstar declined to pay, the group released internal financial data revealing that GTA Online generates upwards of one million dollars per day in revenue. In a twist, the disclosure appeared to reassure investors about GTA 6's commercial prospects: Take-Two Interactive's stock briefly rose after the figures circulated, rather than falling.

The arrest carries dimensions well beyond the gaming industry. After van der Stap was taken into custody, Dutch investigators examining his devices found evidence suggesting he had ordered the commission of two murders abroad. He is now also suspected of attempted incitement to commit murder — charges that dwarf the original hacking allegations in severity. Van der Stap had previously been convicted of hacking-related offences before publicly presenting himself as a reformed security professional.

This arrest comes weeks ahead of GTA 6's November 19 launch and closes a chapter in the prolonged series of security incidents that have dogged Rockstar's development cycle. The company has faced multiple breaches in recent years, most notably the 2022 Teapotuberhacker leak and a separate Lapsus$ incident. The identity of 'Cyberleek,' the group responsible for August's gameplay footage releases, remains publicly unconfirmed.