Russian Citizen Sentenced for Hacking US Companies
Summary
The Department of Justice announced the sentencing of Russian citizen Aleksei Volkov to 81 months in prison for his role as an initial access broker for major cybercrime groups. Volkov facilitated ransomware attacks against U.S. companies, leading to over $9 million in actual losses and over $24 million in intended losses.
What changed
Aleksei Volkov, a Russian national, has been sentenced to 81 months in prison for his involvement in cybercrime, specifically acting as an initial access broker for ransomware groups like Yanluowang. He pleaded guilty to charges including conspiracy to commit computer fraud and money laundering. Volkov specialized in gaining unauthorized access to U.S. companies' computer networks and selling this access to cybercriminals, who then deployed ransomware, encrypted data, and extorted victims for tens of millions of dollars. Volkov admitted to facilitating dozens of attacks, resulting in over $9 million in actual losses and over $24 million in intended losses. He agreed to pay restitution of at least $9,167,198.19 and forfeit equipment used in his crimes.
This sentencing highlights the DOJ's efforts to prosecute individuals involved in facilitating large-scale cyberattacks and ransomware operations. Companies should be aware of the ongoing threat from initial access brokers and the severe penalties associated with such activities. While Volkov's sentencing is a final resolution for his case, the underlying threat of ransomware and data extortion remains significant. Organizations should ensure robust cybersecurity measures are in place to prevent unauthorized access and data breaches, and be prepared to report incidents and cooperate with law enforcement if targeted.
What to do next
- Review and enhance network security protocols to prevent unauthorized access.
- Ensure incident response plans are up-to-date for ransomware and data breach scenarios.
- Report cyber intrusions and extortion attempts to relevant law enforcement agencies.
Penalties
81 months in prison; restitution of at least $9,167,198.19; forfeiture of equipment.
Source document (simplified)
News
Press Release
Russian Citizen Sentenced to Prison for Hacking into U.S. Companies and Enabling Major Cybercrime Groups to Extort Tens of Millions of Dollars
Monday, March 23, 2026
Share For Immediate Release Office of Public Affairs A court in the Southern District of Indiana today sentenced a Russian citizen, Aleksei Volkov, to 81 months in prison for assisting major cybercrime groups, including the Yanluowang ransomware group, in carrying out numerous attacks against U.S. companies and other organizations. Volkov facilitated dozens of ransomware attacks throughout the United States, causing over $9 million in actual losses and over $24 million in intended losses. Volkov was indicted for this activity in both the Southern District of Indiana and Eastern District of Pennsylvania. Police in Rome, Italy, then arrested Volkov, and he was extradited to the United States. He pleaded guilty to charges from both indictments.
According to court documents, Volkov, 26, of St. Petersburg, Russia, was an “initial access broker,” that is, a person who specializes in gaining unauthorized access to computer networks and systems of corporations and organizations and selling that access to other cyber threat actors such as ransomware groups. Volkov found vulnerabilities in computer networks and systems, identified ways to access those networks and systems without authorization, and sold that illicit access to conspirators who were also cybercriminals.
Volkov’s co-conspirators then used the access Volkov provided to infect the affected computer networks and systems with malware. This malware encrypted the victims’ data and prevented the victims from accessing it, damaging their business operations. The conspirators then demanded that the victims pay them a ransom in cryptocurrency — sometimes in the tens of millions of dollars — in exchange for restoring the victims’ access to the data and promising not to publicly disclose the hack or release victims’ stolen data on a “leak” website. In some cases, the victims paid the ransom and in others the conspirators posted the victims’ confidential data on the leak site. If the victims paid the ransom, Volkov received a share of the money.
On Nov. 25, 2025, Volkov pleaded guilty to four counts from the Southern District of Indiana indictment, namely, unlawful transfer of a means of identification, trafficking in access information, access device fraud, and aggravated identity theft; as well as two counts from the Eastern District of Pennsylvania indictment, namely, conspiracy to commit computer fraud and conspiracy to commit money laundering after the two cases were consolidated in the Southern District of Indiana. As part of his plea, Volkov admitted that he and his co-conspirators hacked into numerous victims’ computer networks, stole their data, deployed ransomware, demanded payment in cryptocurrency to exchange for restoring access to the data, and divided the ransom payments among themselves. In fact, they demanded tens of millions of dollars in ransom and received millions. Volkov agreed to pay full restitution to victims including at least $9,167,198.19 to known victims to compensate them for their actual losses as well as to forfeit equipment he used for his crimes.
Assistant Attorney General A. Tysen Duva of the Justice Department’s Criminal Division, U.S. Attorney Thomas E. Wheeler II for the Southern District of Indiana, U.S. Attorney David Metcalf for the Eastern District of Pennsylvania, Special Agent in Charge Timothy O’Malley of the FBI Indianapolis Field Office, and Special Agent in Charge Wayne A. Jacobs of the FBI Philadelphia Field Office made the announcement.
The FBI is investigating the case.
Senior Counsel Matthew A. Lamberti of the Criminal Division’s Computer Crime and Intellectual Property Section (CCIPS), Assistant U.S. Attorney for the District of Connecticut Edward Chang (on detail to CCIPS), Assistant U.S. Attorneys MaryAnn T. Mindrum and Matthew B. Miller for the Southern District of Indiana, and Assistant U.S. Attorney Sarah Wolfe for the Eastern District of Pennsylvania are prosecuting the case. The Justice Department’s Office of International Affairs worked with the Government of Italy to secure the arrest and extradition from Italy of Volkov.
Updated March 23, 2026 Components Criminal Division Criminal - Computer Crime and Intellectual Property Section Criminal - Office of International Affairs Federal Bureau of Investigation (FBI) USAO - Indiana, Southern USAO - Pennsylvania, Eastern Press Release Number: 26-280
Related Content
Press Release Former Bank CEO Pleads Guilty to Multimillion-Dollar Wire Fraud Conspiracy and Venezuela Sanctions Evasion Scheme The former Chief Executive Officer of Nodus International Bank (Nodus Bank), a Puerto Rican international bank, pleaded guilty yesterday for leading a scheme to fraudulently obtain at least $24.9 million...
March 20, 2026
Press Release Three Charged with Conspiring to Unlawfully Divert Cutting Edge U.S. Artificial Intelligence Technology to China Today, an indictment was unsealed charging Yih-Shyan “Wally” Liaw, Ruei-Tsang “Steven” Chang, and Ting-Wei “Willy” Sun, for allegedly conspiring to divert high-performance computer servers assembled in the United States and...
March 19, 2026
Press Release Mississippi Man Sentenced to Nine Years in Prison for Armed Carjacking A Mississippi man was sentenced yesterday to nine years in prison for carjacking and for brandishing a firearm during the carjacking.
March 17, 2026
Related changes
Source
Classification
Who this affects
Taxonomy
Browse Categories
Get Courts & Legal alerts
Weekly digest. AI-summarized, no noise.
Free. Unsubscribe anytime.
Get alerts for this source
We'll email you when DOJ News publishes new changes.