When Your Ransomware Negotiator Works for the Other Side
Dark Reading, Friday, October 16th, 2026
The arrest of a well-known ransomware negotiator in the ShinyHunters probe shows the need for incident vendor oversight.
Edward Dubrovsky, a prominent negotiator whose former firm Cypfer sponsored a Philadelphia cyber summit days earlier, faces federal extortion charges tied to the ShinyHunters investigation.
The core allegation is that a man organizations paid to negotiate with extortionists may have been working with them.
The author frames this as a program failure rather than individual misconduct, since ShinyHunters has run credential theft and SaaS extortion for years, reportedly earning over $70 million.
The piece urges organizations to vet and monitor incident response and negotiation vendors as rigorously as any other high-risk third party.