A Canadian ransomware negotiator faces US federal extortion charges amid an FBI investigation into ShinyHunters, following a breach that exposed sensitive employee records through an unpatched third-party system.