Three Ukrainians to face charges for alleged hack of 610,000 Roblox accounts
Ukrainian prosecutors charged three men for stealing session tokens from over 610,000 Roblox accounts and selling them for an estimated $480,000.
Prosecutors in Ukraine's Lviv region said a 19-year-old organizer from Drohobych and two 22-year-old associates operated from May 2025 to April 2026, harvesting Roblox session tokens via infostealer malware disguised as game cheats and bonus software. They used software to validate stolen cookies and inventory virtual currency and rare items, then sold accounts via Russian platforms for as little as $0.80 each, advertising through Telegram channels and receiving crypto payments. All three are in custody facing charges of theft, money laundering, unauthorized computer interference, and illegal sale of restricted information, carrying up to 12 years in prison.
- Over 610,000 Roblox accounts compromised, mostly popular with children
- Stolen session cookies enabled passwordless account takeover
- Valuable accounts sold individually; lower-value ones sold in bulk
- ~$54,000 in crypto proceeds traced to suspects' bank accounts
- Maximum sentence of 12 years across multiple charges
From the original article
2 min read at therecord.mediaThree Ukrainians are set to stand trial for allegedly stealing access to more than 610,000 Roblox accounts and selling them to buyers in Russia, authorities said.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.