A Canadian cybersecurity executive, Edward Dubrovsky, has been arrested in Pennsylvania on allegations of extortion, with multiple reports linking the case to the FBI's ongoing action against the ShinyHunters hacking group.
ShinyHunters is responsible for some of the most significant data breaches of recent years, with victims spanning major technology, retail, and financial services organisations. The alleged involvement of a security industry professional is worth pausing on, not for the shock value, but because it points to something the sector tends to avoid discussing plainly: access, trust, and professional position can be abused, and insider risk does not only mean disgruntled employees.
For organisations engaging third-party security providers, this is a useful prompt to revisit how vendor relationships are managed. Due diligence on who holds privileged access to your systems and data matters, as does understanding what contractual and technical controls govern that access. Independence, accountability, and transparency are not soft values in security consulting. They are functional requirements.