Oleksii Oleksiyovych Lytvynenko, a 44-year-old Ukrainian national, was sentenced Thursday to four years in federal prison for his role in the Conti ransomware operation. Lytvynenko was arrested in Ireland in July 2023 at the request of the United States and extradited last year. He pleaded guilty in June 2026 to conspiracy to commit wire fraud, admitting to joining Conti in September 2021 and serving the gang in two roles: as an intruder who personally compromised victim networks, and as a developer who built a “loader” — malware that installs the software required to carry out attacks. He personally controlled stolen data from eight US victims and four overseas victims and sent ransom notes as part of Conti’s double-extortion scheme, in which gangs encrypt files and threaten to publish stolen data unless paid in Bitcoin. The Department of Justice said that by January 2022, victim payouts tied to Conti ransomware exceeded $150 million across attacks in 47 US states, 31 foreign countries, Washington D.C., and Puerto Rico.
The sentencing is the latest in a string of law enforcement actions against former Conti members since the gang dissolved in 2022. Conti grew out of the Ryuk cybercrime group in 2020 and became one of the most prolific ransomware operations on record before internal chat logs were leaked and the group came apart under increased law enforcement pressure. Its former members dispersed into successor groups including BlackCat, Black Basta, Hive, and others, several of which have themselves since been disrupted. Lytvynenko had been facing a maximum sentence of 20 years.
Sources
- BleepingComputer — Conti ransomware gang member sentenced to four years in prison
- US Department of Justice press release (September 2026)