Russian Hacker Sentenced to Over Six Years in Prison for Facilitating Ransomware Attacks
Aleksei Volkov, a 26-year-old Russian national, has been sentenced to 81 months (over six years) in federal prison for his role as an “initial access broker” in numerous ransomware attacks targeting U.S. Companies and organizations. The sentencing, handed down in the Southern District of Indiana on March 23, 2026, follows Volkov’s arrest in Rome, Italy and subsequent extradition to the United States. He pleaded guilty to multiple charges in both the Southern District of Indiana and the Eastern District of Pennsylvania. Source
Role as an Initial Access Broker
Volkov specialized in gaining unauthorized access to computer networks and systems, then selling that access to ransomware groups like Yanluowang. He identified vulnerabilities and exploited them to provide conspirators with entry points for deploying malware. Source, Source
Financial Impact of the Attacks
Volkov’s activities facilitated dozens of ransomware attacks across the United States, resulting in over $9 million in actual losses and over $24 million in intended losses. Victims faced data encryption, business disruption, and ransom demands, sometimes reaching tens of millions of dollars. Some victims paid the ransom, while others had their stolen data publicly released on “leak” websites. Volkov received a share of the ransom payments. Source, Source
Guilty Plea and Charges
On November 25, 2025, Volkov pleaded guilty to four counts from the Southern District of Indiana indictment, including unlawful transfer of a means of identification, trafficking in access information, access device fraud, and aggravated identity theft. He also pleaded guilty to two counts from the Eastern District of Pennsylvania indictment: conspiracy to commit computer fraud and conspiracy to commit money laundering. Source
Investigation and Prosecution
The case was investigated by the FBI and prosecuted by the Department of Justice’s Criminal Division, along with U.S. Attorneys from the Southern and Eastern Districts of Indiana and Pennsylvania. The Department of Justice’s Office of International Affairs collaborated with the Italian government to secure Volkov’s arrest and extradition. Source
Restitution and Forfeiture
As part of his sentence, Volkov is required to pay full restitution to the victims, totaling at least $9,167,198.19 to cover actual losses. He must also forfeit the equipment used to commit his crimes. Source
The sentencing of Volkov underscores the Justice Department’s commitment to prosecuting cybercriminals and disrupting ransomware attacks. Source
Keep reading