Reformed Hackers as Insider Risk

Formerly convicted hackers who are later hired by security startups or volunteer with disclosure groups can re‑engage with or enable larger criminal operations, intentionally or via retained contacts. The Netherlands arrest of Pepijn van der Stap—who presented himself publicly as a reformed hacker while working at a cybersecurity firm and volunteering for a vulnerability‑disclosure nonprofit—is a recent example tied to an immediate escalation in ShinyHunters’ offensives. — This raises policy and governance questions about background checks, transparency in offensive‑security hiring, the role of volunteer disclosure groups, and how to balance rehabilitation with systemic risk.