Conti Ransomware Member Sentenced to Four Years in US Prison

A 44-year-old Ukrainian national, Oleksii Oleksiyovych Lytvynenko, has been sentenced to four years in prison for his role in the Conti ransomware group, the US Justice Department announced. Conti was one of the most prolific ransomware operations before disbanding in 2022, attacking more than 1,000 organisations globally.

Lytvynenko pleaded guilty in June to conspiracy to commit wire fraud. He admitted joining Conti in September 2021, developing malware for the group, and holding stolen data from 12 victims, eight of them based in the United States. Prosecutors said he and his co-conspirators extorted around $634,000 in Bitcoin from two Tennessee-based victims, including a government entity whose compromise affected a sheriff's department, local emergency medical services and police. Another Tennessee victim's stolen data was leaked after it refused to pay a $3 million ransom.

Authorities arrested Lytvynenko in Ireland in July 2023, finding him asleep near an open laptop running the hacking tool Cobalt Strike. He was extradited to the United States in October 2025. Officials noted he continued ransomware operations even after Conti's conspiracy ended, underscoring that cybercriminals operating from anywhere can still face prosecution in US courts.