In short
- Stryzhak acted as an affiliate for both Nefilim and Hive ransomware groups, targeting about 1,500 victims worldwide.
- The U.S. State Department is offering up to $11 million for information on co-conspirator Volodymyr Tymoshchuk.
What happened
Artem Stryzhak, a Ukrainian national, was sentenced to 70 months in prison after pleading guilty to conspiracy to commit fraud, extortion, and related activity in connection with computers. He participated in ransomware attacks as an affiliate of Nefilim and Hive groups, extorting millions from victims and causing major disruptions, including to healthcare during the COVID-19 pandemic.
Stryzhak was arrested in Spain in June 2024 and extradited to the United States. The FBI coordinated a months-long disruption campaign against Hive, providing decryption keys to victims. The U.S. State Department’s TOC Rewards Program is offering up to $11 million for information leading to the arrest or conviction of co-conspirator Volodymyr Tymoshchuk.
In numbers
- 70 months prison sentence for Artem Stryzhak
- 1,500 victims attacked by Hive ransomware group
- $11 million reward for information on Volodymyr Tymoshchuk
Named in this item
What compliance teams should check
- Screen for ransomware typologies linked to Nefilim and Hive groups in client activity.
- Monitor for transactions involving affiliates of Artem Stryzhak and Volodymyr Tymoshchuk, especially ransom payments.
- Review client exposure to the U.S. State Department’s TOC Rewards Program and related lists.
Why it matters
This case highlights the ongoing threat posed by ransomware groups like Nefilim and Hive, which have targeted critical sectors including healthcare and government entities. The sentencing of Stryzhak and the continued pursuit of his co-conspirator demonstrate law enforcement’s commitment to disrupting cybercriminal networks. Compliance officers must remain vigilant for ransomware typologies, monitor for suspicious payments, and ensure their organizations are not inadvertently facilitating such schemes, especially as rewards and international cooperation increase pressure on these actors.
Catch stories like these on your own customers.
complead screens your customers against adverse media, sanctions and PEP lists, and re-checks them every day. When a name you hold turns up in the news, it lands in your case queue with the evidence attached.
BROOKLYN, NY – Earlier today, in federal court in Brooklyn, Artem Stryzhak, a Ukrainian national, was sentenced by United States District Judge Pamela K. Chen to 70 months in prison for using ransomware to extort millions of dollars from victims. The defendant pled guilty in December 2025 to conspiracy to commit fraud, extortion, and related activity in connection with computers.U.S. Department of Justice, 27 Oct 2026, 12:00 UTC, justice.gov