U.S. DEPARTMENT OF JUSTICE A1 CYBER & DATA SECURITY HIGH RISK Published 27 Oct 2026 at 12:00 UTC, affecting US, UA

DOJ: Ukrainian National Sentenced to 70 Months in Prison for Multi-Million Dollar Ransomware Conspiracies

DOJ sentenced Artem Stryzhak to 70 months in prison for multi-million dollar ransomware conspiracies.

Read the original notice ↗ All US items

In short

  • Stryzhak acted as an affiliate for both Nefilim and Hive ransomware groups, targeting about 1,500 victims worldwide.
  • The U.S. State Department is offering up to $11 million for information on co-conspirator Volodymyr Tymoshchuk.

What happened

Artem Stryzhak, a Ukrainian national, was sentenced to 70 months in prison after pleading guilty to conspiracy to commit fraud, extortion, and related activity in connection with computers. He participated in ransomware attacks as an affiliate of Nefilim and Hive groups, extorting millions from victims and causing major disruptions, including to healthcare during the COVID-19 pandemic.

Stryzhak was arrested in Spain in June 2024 and extradited to the United States. The FBI coordinated a months-long disruption campaign against Hive, providing decryption keys to victims. The U.S. State Department’s TOC Rewards Program is offering up to $11 million for information leading to the arrest or conviction of co-conspirator Volodymyr Tymoshchuk.

In numbers

  • 70 months prison sentence for Artem Stryzhak
  • 1,500 victims attacked by Hive ransomware group
  • $11 million reward for information on Volodymyr Tymoshchuk

Named in this item

1 entity
STATUS NAME ISO PROGRAM IDENTIFIER
Artem Stryzhak
Person, convicted
Screen this name
UA — —

What compliance teams should check

  • Screen for ransomware typologies linked to Nefilim and Hive groups in client activity.
  • Monitor for transactions involving affiliates of Artem Stryzhak and Volodymyr Tymoshchuk, especially ransom payments.
  • Review client exposure to the U.S. State Department’s TOC Rewards Program and related lists.

Why it matters

This case highlights the ongoing threat posed by ransomware groups like Nefilim and Hive, which have targeted critical sectors including healthcare and government entities. The sentencing of Stryzhak and the continued pursuit of his co-conspirator demonstrate law enforcement’s commitment to disrupting cybercriminal networks. Compliance officers must remain vigilant for ransomware typologies, monitor for suspicious payments, and ensure their organizations are not inadvertently facilitating such schemes, especially as rewards and international cooperation increase pressure on these actors.

FOR COMPLIANCE TEAMS

Catch stories like these on your own customers.

complead screens your customers against adverse media, sanctions and PEP lists, and re-checks them every day. When a name you hold turns up in the news, it lands in your case queue with the evidence attached.

FROM THE NOTICE BROOKLYN, NY – Earlier today, in federal court in Brooklyn, Artem Stryzhak, a Ukrainian national, was sentenced by United States District Judge Pamela K. Chen to 70 months in prison for using ransomware to extort millions of dollars from victims. The defendant pled guilty in December 2025 to conspiracy to commit fraud, extortion, and related activity in connection with computers. U.S. Department of Justice, 27 Oct 2026, 12:00 UTC, justice.gov

Related on the radar

All US items →
28 Oct 2026 MED
28 Oct 2026
U.S. IMMIGRATION AND CUSTOMS ENFORCEMENT A1 FINANCIAL CRIME
Time runs out for Rolex
HIGH
27 Oct 2026 HIGH

How the radar works

Each item is classified by category, pinned to the jurisdictions it affects and scored from 0 to 10. The score starts from a model assessment of how serious the item is, then adds points for the kind of event, what it names and the source behind it. Reliability grades run from A1 (the regulator’s own notice) to C3 (a single secondary source).

AML News Radar reports what its sources publish. Summaries, categories and scores are automated; read the original notice before acting. It is not legal advice and not a screening decision.

Read the full methodology

Subscribe to the radar

You will get new items from every jurisdiction and category.

DIGEST