Slashdot has reported:

Canadian cybersecurity executive and ransomware expert Edward Dubrovsky was arrested in the Philadelphia area in recent days as part of an investigation into a hack that exposed sensitive information belonging to current and former FBI employees, according to court documents and people familiar with the inquiry. He faces charges related to extortion and making threats, and has been transferred to the Eastern District of Texas for a scheduled detention hearing, court records and a law enforcement official said.

FBI Director Kash Patel announced an arrest on Friday but did not identify the person, say where it happened or describe the role the suspect is believed to have played in the hack. Multiple people familiar with the investigation told CNN the defendant is believed to be connected to the breach. The inmate locator on the U.S. Bureau of Prisons website lists a 54-year-old Edward Dubrovsky as being held at a federal facility in Philadelphia, security researcher Brian Krebs reported.

A LinkedIn profile under Dubrovsky’s name describes him as a “globally recognized cybersecurity expert” and lists years of experience in Canada’s cybersecurity industry. An Ed Dubrovsky is also the author of a book about handling ransomware negotiations with cybercriminals.

The FBI has also examined how the security failure occurred. Senior FBI cyber official Brett Leatherman said last week that a contractor responsible for the bureau’s jobs portal failed to install software “explicitly issued to secure the platform.” Leatherman said the FBI had “removed the contractor.”

The platform is a human-resources product made by Oracle, according to the hackers known as ShinyHunters. Google’s Threat Intelligence Group said the hackers had used a flaw in the software to attack targets in the education sector in May and June. Months later, the FBI contractor apparently still had not applied an available security patch.

The arrest forms part of the inquiry into the breach of FBI employee data. Patel’s Friday announcement did not say where the arrest took place or explain the suspected connection to the hack; those details emerged from court records and people familiar with the investigation.