INTERNATIONAL (NPA) — March 24, 2026 — A court in the Southern District of Indiana has sentenced Russian citizen Aleksei Volkov to 81 months in prison for assisting major cybercrime groups, including the Yanluowang ransomware gang, in attacks against U.S. companies and organisations.
Volkov, 26, of St. Petersburg, Russia, acted as an “initial access broker,” specialising in breaking into corporate computer networks and selling that access to ransomware operators. His activities facilitated dozens of attacks across the United States, causing more than $9 million in actual losses and $24 million in intended losses. He was indicted in both Indiana and Pennsylvania, arrested in Rome, Italy, and extradited to the U.S., where he pleaded guilty to multiple charges.
Court documents show Volkov exploited vulnerabilities to gain unauthorized access, which his co‑conspirators then used to deploy ransomware. Victims’ data was encrypted, business operations disrupted, and ransom demands made in cryptocurrency — sometimes in the tens of millions of dollars. In some cases, victims paid, while in others their stolen data was leaked online. Volkov received a share of the ransom proceeds.
On November 25, 2025, Volkov pleaded guilty to six counts, including identity theft, trafficking in access information, conspiracy to commit computer fraud, and money laundering. He admitted to hacking networks, stealing data, and dividing ransom payments with co‑conspirators. He agreed to pay restitution of at least $9.1 million and forfeit equipment used in his crimes.
The case was prosecuted by attorneys from the Justice Department’s Criminal Division, the Southern District of Indiana, and the Eastern District of Pennsylvania, with support from the FBI and international partners. The Justice Department’s Office of International Affairs coordinated with Italian authorities to secure Volkov’s arrest and extradition.
