Dutch police have detained three members of a cybercrime group that hacked into corporate networks, stole sensitive data, and then tried to extort companies by threatening to publish the stolen files: https://www.politie.nl/nieuws/2023/februari/23/05-drie-mannen-aangehouden-in-onderzoek-naar-grootschalige-internationale-datadiefstal-en-datahandel.html

According to Dutch news agency NOS, one of the three suspects is a security researcher who works for the Dutch Institute for Vulnerability Disclosure (DIVD), a Dutch cybersecurity collaboration group: https://nos.nl/artikel/2465062-opgepakte-hacker-was-actief-voor-gesubsidieerde-beveiligingsorganisatie-divd