CYBERSECURITYTRACKER
Permanent story citation

Conti Ransomware Member Sentenced to 4 Years in Jail

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 7218

As cited

Copy frozen at (site build).

ransomware

Conti Ransomware Member Sentenced to 4 Years in Jail

Oleksii Oleksiyovych Lytvynenko, a Ukrainian national and Conti ransomware group member, was sentenced to four years in federal prison on September 10, 2026, after pleading guilty to conspiracy to commit wire fraud. Lytvynenko developed malware tools used in attacks affecting at least 12 organizations across the United States and abroad, and controlled stolen data for ransom demands. Four additional Russian co-conspirators remain indicted for their involvement in Conti operations, which reportedly generated $150 million in ransom payments and affected approximately 1,000 entities across 31 countries before the group dissolved in 2022.

Why it matters: Organizations targeted by Conti and similar ransomware groups should review incident response procedures and verify whether their data was among the stolen records controlled by group members now entering the justice system.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

ransomware

Conti Ransomware Member Sentenced to 4 Years in Jail

Oleksii Oleksiyovych Lytvynenko, a Ukrainian national and Conti ransomware group member, was sentenced to four years in federal prison on September 10, 2026, after pleading guilty to conspiracy to commit wire fraud. Lytvynenko developed malware tools used in attacks affecting at least 12 organizations across the United States and abroad, and controlled stolen data for ransom demands. Four additional Russian co-conspirators remain indicted for their involvement in Conti operations, which reportedly generated $150 million in ransom payments and affected approximately 1,000 entities across 31 countries before the group dissolved in 2022.

Why it matters: Organizations targeted by Conti and similar ransomware groups should review incident response procedures and verify whether their data was among the stolen records controlled by group members now entering the justice system.

Actorsconti
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary