A US federal court has sentenced Ukrainian national Artem Stryzhak to 70 months in prison for participating in ransomware operations that targeted hospitals, businesses and government bodies.
Federal prosecutors said Stryzhak worked with the Nefilim and Hive ransomware groups, which encrypted victims’ systems and demanded payment for decryption and for promises not to publish stolen information. The wider Hive operation was linked to roughly 1,500 victims and more than US$100 million in losses, according to the Justice Department.
Stryzhak was arrested in Spain in June 2024 and extradited to the United States in April 2025. He pleaded guilty in December 2025 to conspiracy offences involving unauthorised access to protected computers. The sentence announced on 27 October follows that plea; it is not a finding about every attack attributed to either ransomware network.
The prosecution forms part of an international enforcement effort against ransomware infrastructure and affiliates. Authorities have separately disrupted Hive’s servers and supplied decryption keys to victims, but the sentencing concerns Stryzhak’s own admitted conduct.
Official Justice Department release
