:

RYUK RANSOMWARE OPERATOR GETS 24 MONTHS

SECURITY DESK1 MIN READ
WED, SEP 23, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

An Armenian national has been sentenced to two years in prison for participating in Ryuk ransomware attacks targeting U.S. companies. The defendant encrypted victims' systems as part of the notorious cybercriminal operation.

The sentencing marks another enforcement action against the Ryuk ransomware gang, which has extracted hundreds of millions in ransom payments from victims across multiple sectors. The defendant faced charges related to computer fraud and abuse for his role in hacking and encrypting systems belonging to American organizations. Beyond the 24-month prison term, he received three years of supervised release following his incarceration. Ryuk emerged as a major ransomware threat in 2018 and has been linked to attacks on hospitals, government agencies, and Fortune 500 companies. The operation was eventually disrupted through coordinated law enforcement efforts, though variants and copycat groups have continued operations. This prosecution reflects ongoing U.S. efforts to hold individual members of ransomware operations accountable, though many perpetrators remain at large outside U.S. jurisdiction.

■ SOURCES

Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

Sweden's data privacy regulator IMY has fined IT systems provider Miljödata $183,000 for inadequate security measures that led to a data breach in August 2025. The incident exposed personal information of 2.2 million individuals.

JUST NOWSecurity Desk

F5 has released security updates to address a critical zero-day vulnerability in BIG-IP APM that attackers are actively exploiting to achieve remote code execution.

4H AGOSecurity Desk

Obscura has launched a VPN service architected to make user activity logging technically impossible. The service uses a no-log-by-design approach rather than relying on policy promises alone.

6H AGOIndustry Desk

Hackers claim to have compromised the Federal Bureau of Investigation and obtained personal data on all FBI employees. The breach's scope and authenticity have not yet been independently verified.

10H AGOSecurity Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.