Australian police have arrested two alleged members of TeamPCP, a notorious hacking group behind widespread cyberattacks on tech giants and open-source projects. The suspects, charged with over a dozen offenses, are accused of stealing credentials and extorting victims. TeamPCP’s leader, Ruben Thomson, aka Ellis, is among those apprehended, sparking whispers of a major breakthrough in cyber law enforcement.

According to the Australian Federal Police, the hackers targeted Mercor, an AI recruiting startup, as well as the European Commission's cloud infrastructure. The stolen data included more than half a million credentials, allowing access to critical systems and customer information. The FBI's cyber division chief, Brett Leatherman, confirmed the scale of the operation, stating that TeamPCP infiltrated over a thousand organizations.

The investigation began in April 2026, prompted by reports from multiple cybersecurity firms. Australian officials seized a large quantity of stolen data and devices from the hackers during their raids. The arrests are seen as a significant step in curbing cybercrime but raise questions about the effectiveness of current cybersecurity measures.

The case highlights the ongoing battle between cybercriminals and law enforcement. While the arrests are a victory, they also underscore the need for constant vigilance and updated security protocols in the digital age.