Overview
- A Ukrainian national, Oleksii Oleksiyovych Lytvynenko, admitted guilt in June 2026 to conspiracy to commit wire fraud for his role in the Conti ransomware operation.
- Prosecutors say Lytvynenko joined Conti in September 2021, helped develop a malware loader, and possessed data taken from 12 victims including eight in the United States.
- Lytvynenko was arrested in Ireland in July 2023, extradited to the United States in October 2025, and faces up to 20 years in prison at his September 10, 2026 sentencing.
- U.S. authorities and the FBI framed the plea as part of a broader strategy to hold developers, infrastructure operators, and financial facilitators of ransomware accountable.
- Conti ran a franchise model that infected more than 1,000 organizations and took an estimated $150 million in ransoms before collapsing in 2022, and investigators now pair extraditions with blockchain tracing to follow ransom flows.