Toronto-area cybersecurity specialist Edward Dubrovsky has been arrested by the FBI amid an investigation linked to the ShinyHunters hacking group, with U.S. prosecutors alleging he secretly collaborated with cybercriminals to exploit his own clients.

A Canadian cybersecurity executive who built his career helping businesses respond to ransomware attacks is facing federal criminal charges in the United States over allegations that he worked with cybercriminals against the companies he was supposed to protect. Edward Dubrovsky, 54, was arrested in Philadelphia on October 7th while visiting the city for a cybersecurity conference. He faces charges involving conspiracy to commit extortion and interference with commerce through threats. The arrest occurred amid an FBI investigation associated with ShinyHunters, a hacking group that recently claimed responsibility for breaching an FBI employment portal and stealing sensitive information. However, prosecutors have not publicly established a direct connection between Dubrovsky’s alleged conduct and that particular breach.

During an October 8th federal court hearing, Assistant U.S. Attorney Anthony Carissimi alleged that Dubrovsky had used his professional relationships to facilitate fraudulent activity involving his own clients and business partners. Rather than acting solely as an intermediary between ransomware victims and attackers, prosecutors claim he collaborated with individuals involved in cybercrime. Carissimi also pointed to cryptocurrency transactions allegedly involving criminal associates, including payments using Monero, a digital currency designed to provide greater transaction privacy. Although the prosecutor described Dubrovsky’s alleged involvement with criminal groups, the government’s underlying criminal complaint remains sealed, leaving many details of the investigation undisclosed.

Dubrovsky has established a professional reputation as a ransomware negotiator and cybersecurity adviser. He describes himself as an internationally recognized specialist in cyber extortion and recently published a book titled Cyber Extortion: Strategic Response, offering guidance to organizations confronting ransomware threats. Before his arrest, he attended the NetDiligence cybersecurity conference in Philadelphia, where Toronto-based technology company CyberSteward shared photographs of him signing copies of the book. The company has not publicly clarified his current employment status or professional relationship with the organization. Dubrovsky also previously held a managing director position at CYPFER, a cybersecurity firm involved in responding to a major cyberattack against the City of Hamilton in 2024. CYPFER has stated that he did not participate in that particular assignment.

Dubrovsky’s court-appointed lawyer, Tim Wright, challenged the allegations and emphasized that the prosecution’s claims have not been tested in court. Wright described his client as an established cybersecurity professional who intends to contest the charges and defend his reputation. The defence also highlighted Dubrovsky’s professional travel schedule, which included plans to attend additional industry events in Canada and the United States. Despite those arguments, U.S. Magistrate Judge Scott W. Reid ordered Dubrovsky to remain in custody pending his transfer to Texas, where the charges originated and where a formal detention hearing is expected. Federal detention records subsequently showed him being held at a Philadelphia facility.

The case has renewed attention on the role of private ransomware negotiators, and the potential conflicts of interest that can arise when companies hire intermediaries to communicate with cybercriminals. David Shipley, chief executive of Canadian cybersecurity company Beauceron Security, cautioned that paying ransomware demands does not guarantee stolen information will remain confidential or that compromised systems will be restored. He encouraged organizations with reliable backups to prioritize recovering clean data rather than relying on payments to attackers. As the federal investigation continues, Dubrovsky remains accused of serious criminal conduct, but the allegations have not been proven in court.

The post Canadian Cybersecurity Executive Accused of Helping Hackers Extort His Own Clients appeared first on Canadian Fraud News Inc. | Fraud related news | Fraud in Canada.

Originally published on Canadian Fraud News.