Russian Hack Hub Exposed — 21 States Hit

U.S. prosecutors say three Russian nationals helped run a cybercrime service that touched critical infrastructure in 21 states and caused more than $62 million in losses.

Quick Take

Federal prosecutors unsealed a December 2024 indictment in the Northern District of Ohio against three Russian nationals and two Russia-based companies.
The Justice Department says the case centers on “bulletproof hosting” that supported ransomware, phishing, and other attacks.
Authorities say victims were hit across 21 states and in several countries, with losses measured in the tens of millions of dollars.
The case fits a long pattern of U.S. charges against Russia-based cyber suspects who remain out of reach in Russia.

What Prosecutors Say Happened

The U.S. Attorney’s Office in Cleveland says the indictment was returned in December 2024 and unsealed this week in the Northern District of Ohio. It charges Alexander Alexandrovich Volosovik, Kirill Andreevich Zatolokin, and Yulia Vladimirovna Pankova, along with Media Land, LLC, and ML.Cloud, LLC, with conspiracy to commit computer fraud, wire fraud, and money laundering. Prosecutors say the case stems from a seven-year investigation.

According to the indictment, the companies were based in St. Petersburg and provided server infrastructure and related internet services. The Justice Department says that infrastructure was used by criminal clients to infect computers with malware and ransomware, extort money and cryptocurrency, run phishing campaigns, and support criminal marketplaces. The indictment also says Media Land and ML.Cloud gave technical support that helped launch brute force attacks and fraudulent domain registrations.

Why The Case Matters

The alleged scale is what makes the case stand out. Prosecutors say the network affected victims in 21 states and several countries, with losses totaling more than $62 million. CNN reported that the scheme allegedly targeted hospitals, schools, and banks, which puts the case in the category of attacks that can reach far beyond private victims and into daily life, public services, and basic trust in online systems.

The case also shows how often U.S. law enforcement ends up using indictments as a public warning when suspects are in Russia. The defendants are alleged to live in St. Petersburg, and the current record does not show any arrest or extradition. That leaves the charges meaningful as a legal record and sanctions tool, but not as an immediate way to bring the accused to a U.S. courtroom.

A Familiar Pattern In Cyber Cases

This is not the first time U.S. officials have charged Russian cyber suspects who are still outside American reach. In past cases involving Russian nationals accused of hacking and fraud, federal agencies have announced indictments, sanctions, and public warnings while the suspects remained free in Russia. That long pattern helps explain why many of these cases become symbols of pressure as much as criminal proceedings.

US indicts Russians alleged to be at center of major cybercrime network

The US Justice Department on Tuesday announced the indictment of three Russians who prosecutors say were at the center of a major cybercrime network that allegedly helped hackers target hospitals, schools… pic.twitter.com/evu0bBILu8

— Black Page (@WorldNEWS0_) July 16, 2026

For that reason, the strongest immediate effect of this indictment may be deterrence, not arrest. It puts names, companies, and alleged conduct on the public record. It also signals to banks, hospitals, schools, and other targets that U.S. prosecutors are still tracking the infrastructure behind major cybercrime. At the same time, the case will remain difficult to test unless evidence, witnesses, or cooperation from Russia ever become available.

What Remains Unclear

The available reporting does not include a public forensic audit of the claimed $62 million loss figure, and it does not include a defense response from the named defendants. The indictment also has not yet been paired, in the public record, with trial dates, discovery material, or evidence that would let outsiders measure how strong the government’s case is beyond the allegations themselves. Those gaps matter in a case built on complex digital evidence.