Ryuk ransomware operator gets 2-year sentence after extorting victims for $1.2 million
An Armenian Ryuk operator received a two-year U.S. prison sentence and $1.2 million in victim restitution.
Karen Vardanyan, 35, was sentenced to two years in U.S. federal prison, three years of supervised release, and $1,219,106 in restitution after pleading guilty to conspiracy and computer fraud. Prosecutors called him a core Ryuk member and said the group launched more than 2,400 attacks and took at least $15 million in ransoms, including a Universal Health Services incident that cost $67 million. He was arrested in Kyiv and extradited from Ukraine in July 2025. Ryuk, first seen in 2018, has been linked to Russian cybercriminals and to operators of Trickbot.
- Vardanyan got two years in prison and $1.22 million restitution.
- Prosecutors cited over 2,400 Ryuk attacks and at least $15 million paid.
- He was arrested in Kyiv and extradited from Ukraine in July 2025.
- A prior Ryuk hit on Universal Health Services cost $67 million.
- Threat actors
- RyukKaren Vardanyan
- Victims
- Universal Health Services
- Organizations
- U.S. Department of JusticeFBI
- Countries
- ArmeniaUkraineUnited StatesRussia
From the original article
2 min read at therecord.mediaAn Armenian national and member of the Ryuk ransomware gang was sentenced to two years in federal prison for his role in launching attacks.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.