{ "id": "6229c4de-aea4-4dc7-90cb-c101aa774508", "created_at": "2026-04-09T02:24:17.837737Z", "updated_at": "2026-04-10T03:34:59.486901Z", "deleted_at": null, "sha1_hash": "67d9d995b4be2fc99b1fba165aed4b7d1ff54f5e", "title": "Alleged member of ShinyHunters held in Morocco on Interpol Red Notice, U.S. seeking extradition -- reports - DataBreaches.Net", "llm_title": "", "authors": "", "file_creation_date": "0001-01-01T00:00:00Z", "file_modification_date": "0001-01-01T00:00:00Z", "file_size": 42094, "plain_text": "Alleged member of ShinyHunters held in Morocco on Interpol Red\r\nNotice, U.S. seeking extradition -- reports - DataBreaches.Net\r\nPublished: 2022-07-29 · Archived: 2026-04-09 02:16:00 UTC\r\nA report by Vincent Monnier in a French news magazine, L’OBS, claims that an alleged member of ShinyHunters\r\nwas arrested on June 1 as he attempted to board a flight at Rabat to Brussels. In translation, the report says:\r\nArrested on June 1 at Rabat airport, Sébastien Raoult, a 21-year-old Frenchman from Epinal is claimed\r\nby American justice. The FBI suspects him of belonging to a group of hackers who recently hit the\r\nheadlines. Four other people were reportedly interviewed in France at the request of the United States.\r\nRaoult was reportedly detained because of a “red notice” issued by Interpol at the request of a Washington State\r\nprosecutor.  Interpol’s site indicates that there are currently approximately 69,270 valid Red Notices, of which\r\nsome 7,500 are public. A check of public ones did not return any results for Raoult.\r\nMonnier reports that Raoult, who is known as Sezyo,\r\nhas been in the crosshairs of FBI agents for several months. The latter suspect him of being “one of the\r\nimportant members” of the ShinyHunters hacker group.\r\nWhen asked about the arrest and Raoult, ShinyHunters told DataBreaches that they have no knowledge of Raoult\r\naka “Sezyo” or any recent arrest of anyone connected to ShinyHunters. Nor have they personally been questioned\r\nby anyone in law enforcement, they also tell DataBreaches.\r\nRaoult’s Twitter timeline reveals a young man who does not seem particularly concerned about opsec, as he\r\nuploaded a number of videos and pictures.\r\nAt this point, there is no confirmation from the FBI or DOJ and a search of PACER for court filings with Raoult’s\r\nname return no results (which may simply mean that there is a sealed case at this point).\r\nAs FranceBlue reports, Raoult’s lawyer sees a reported extradition request as some kind of legal nonsense:\r\n“It’s a huge problem. This case falls under French jurisdiction because the acts were allegedly\r\ncommitted in France by people of French nationality. And yet, it is the United States, which is claiming\r\nthis case”, proclaims  Philippe Ohayon, the young man’s lawyer.\r\nIt may not seem to be nonsense for the country where the victims reside to want to prosecute on their home turf,\r\nbut we have seen mixed results on other extradition requests (e.g., the U.K. declined to extradite Lauri Love to the\r\nU.S. but did extradite Nathan Wyatt), and Yevgeniy Nikulin was extradited from the Czech Republic to stand trial\r\nin the U.S. even though Russia tried to claim that he should be extradited there. Both Wyatt and Nikulin are\r\ncurrently in U.S. prisons.\r\nhttps://www.databreaches.net/alleged-member-of-shinyhunters-held-in-morocco-on-interpol-red-notice-u-s-seeking-extradition-reports/\r\nPage 1 of 2\n\nSeeking extradition of a French citizen will not be an easy ask, as France generally refuses to extradite young\r\npeople for hacking charges that could be tried there less punitively. None of the French citizens charged as part of\r\nGnosticPlayers have been extradited to the U.S. At this point, though, the U.S. is seeking extradition from\r\nMorocco.\r\nBut claims being repeated in French media that Raoult could be facing 116 years in prison should he be extradited\r\nhere should not be taken seriously. Prosecutors may try to intimidate defendants into plea deals by dangling such\r\nbig numbers as possibilities, but they are not realistic at all.\r\nSource: https://www.databreaches.net/alleged-member-of-shinyhunters-held-in-morocco-on-interpol-red-notice-u-s-seeking-extradition-report\r\ns/\r\nhttps://www.databreaches.net/alleged-member-of-shinyhunters-held-in-morocco-on-interpol-red-notice-u-s-seeking-extradition-reports/\r\nPage 2 of 2", "extraction_quality": 1, "language": "EN", "sources": [ "ETDA" ], "references": [ "https://www.databreaches.net/alleged-member-of-shinyhunters-held-in-morocco-on-interpol-red-notice-u-s-seeking-extradition-reports/" ], "report_names": [ "alleged-member-of-shinyhunters-held-in-morocco-on-interpol-red-notice-u-s-seeking-extradition-reports" ], "threat_actors": [ { "id": "c071c8cd-f854-4bad-b28f-0c59346ec348", "created_at": "2023-11-08T02:00:07.132524Z", "updated_at": "2026-04-10T02:00:03.422366Z", "deleted_at": null, "main_name": "ShinyHunters", "aliases": [], "source_name": "MISPGALAXY:ShinyHunters", "tools": [], "source_id": "MISPGALAXY", "reports": null }, { "id": "6f7f2ed5-f30d-4a99-ab2d-f596c1d413b2", "created_at": "2025-10-24T02:04:50.086223Z", "updated_at": "2026-04-10T02:00:03.770068Z", "deleted_at": null, "main_name": "GOLD CRYSTAL", "aliases": [ "Scattered LAPSUS$ Hunters", "ShinyCorp", "ShinyHunters" ], "source_name": "Secureworks:GOLD CRYSTAL", "tools": [], "source_id": "Secureworks", "reports": null }, { "id": "1609af91-e258-4058-9caa-59e7d171aecb", "created_at": "2022-10-25T16:07:24.491691Z", "updated_at": "2026-04-10T02:00:05.008935Z", "deleted_at": null, "main_name": "Gnosticplayers", "aliases": [], "source_name": "ETDA:Gnosticplayers", "tools": [], "source_id": "ETDA", "reports": null }, { "id": "56d15cc7-f9c1-451f-bdde-8c283e3cf15b", "created_at": "2023-01-06T13:46:39.015288Z", "updated_at": "2026-04-10T02:00:03.181411Z", "deleted_at": null, "main_name": "Gnosticplayers", "aliases": [], "source_name": "MISPGALAXY:Gnosticplayers", "tools": [], "source_id": "MISPGALAXY", "reports": null }, { "id": "d8dff631-87b0-4320-8352-becff28dbcf1", "created_at": "2022-10-25T16:07:24.565038Z", "updated_at": "2026-04-10T02:00:05.034516Z", "deleted_at": null, "main_name": "ShinyHunters", "aliases": [], "source_name": "ETDA:ShinyHunters", "tools": [], "source_id": "ETDA", "reports": null } ], "ts_created_at": 1775701457, "ts_updated_at": 1775792099, "ts_creation_date": 0, "ts_modification_date": 0, "files": { "pdf": "https://archive.orkl.eu/67d9d995b4be2fc99b1fba165aed4b7d1ff54f5e.pdf", "text": "https://archive.orkl.eu/67d9d995b4be2fc99b1fba165aed4b7d1ff54f5e.txt", "img": "https://archive.orkl.eu/67d9d995b4be2fc99b1fba165aed4b7d1ff54f5e.jpg" } }