Krebs on Security first identified a Canadian cybersecurity executive arrested by the FBI on federal extortion charges as Edward Dubrovsky, who led consulting and later served as chief operating officer at the ransomware-negotiation firm Cypfer before moving to another incident-response firm, CyberSteward. A complaint summary that Krebs found indexed at CourtListener charges him with "conspiracy to threaten to impair the confidentiality of information with the intent to extort money," and "interference with commerce by threats." Cypfer disputes a LinkedIn claim that Dubrovsky co-founded the firm, telling Krebs on Security he instead served as managing director until resigning in December 2025.
Nextgov/FCW reports that Dubrovsky, 54, appeared in a Philadelphia court and was ordered transferred to the Eastern District of Texas, where prosecutors are seeking his detention before trial; the complaint itself remains sealed, and his specific alleged conduct has not been made public. The arrest is tied to the FBI's investigation into ShinyHunters, the hacking group behind a breach of the bureau's own employee data that exposed addresses, phone numbers, family details and intelligence assignments, Nextgov/FCW reports. Dubrovsky could not be reached for comment, and court records show he does not yet have an attorney, according to Krebs on Security. The FBI says ShinyHunters has extorted more than $70 million from victims so far this year.
Elsewhere, Central Ohio Primary Care Physicians confirmed that a breach discovered in late August has affected 1.4 million patients, NBC4 WCMH-TV reports. The practice said attackers used vishing, or voice phishing, to gain access, and that a ransomware gang identified as Chaos stole names, addresses, Social Security numbers, financial records and limited health data. Cybersecurity expert Shawn Waldman told the station, "This is a severe compromise of personal, identifiable information or patient health information that can be really disastrous." CEO Don Deep said the practice is "implementing enhanced security protocols to further protect our systems" and will pay for credit and dark web monitoring for those affected.
A third disclosure shows how long a warning can sit unheeded before it becomes an attack. Months before hackers manipulated refrigeration controls across hundreds of French supermarkets this month, researchers at Claroty had already published high-severity flaws in the Danfoss controllers behind them, Cybersecurity Dive reports. "Industrial control systems such as refrigeration controllers are often assumed to be on safely controlled networks, however our research found many of these devices are directly exposed to the internet," Claroty Chief Technology Officer Amir Preminger told the outlet. Jonathan Braley, threat intelligence director at the Food and Agriculture Information Sharing and Analysis Center, added that many of the affected units are past end of life and no longer receiving security updates. The lesson across all three cases is less about any single flaw than about how long one can sit unpatched, or one executive's incentives can go unchecked, before someone acts on it.
Leave a Reply