Pepijn van der Stap

Pepijn van der Stap (born February 2002) is a Dutch convicted cybercriminal. While employed as a software engineer at the Amsterdam cybersecurity firm Hadrian and volunteering as a researcher for the Dutch Institute for Vulnerability Disclosure (DIVD), he simultaneously orchestrated a criminal scheme involving the theft of data from millions of individuals and the extortion of companies for millions of euros.
His case drew significant media attention for the stark contrast between his public white hat hacker persona and his previously secret black hat hacker persona. The Dutch Public Prosecution Service (OM) treated the case as a precedent-setting event, intended to serve as a clear warning to other cybercriminals.