Rydox Cybercrime Marketplace Operator Ardit Kutleshi Pleads Guilty in US Court

Kosovar national Ardit Kutleshi, 28, pleaded guilty to aggravated identity theft and money laundering for running the Rydox marketplace, which sold roughly 321,372 cybercrime products to about 18,000 users before its December 2024 seizure; he faces up to 22…

Ardit Kutleshi, a 28-year-old Kosovar national, pleaded guilty in US court to aggravated identity theft and money laundering conspiracy for creating and operating Rydox, an illicit marketplace that sold stolen personal information, credentials, payment-card data, SSNs, device access, phishing kits, and stealer logs. SecurityWeek reported the site operated from 2016 to 2024 — BleepingComputer dates it from February 2016 to its December 2024 shutdown — listing about 321,372 products (BleepingComputer says over 321,000) to roughly 18,000 users, with more than 7,600 transactions and at least $232,000 in revenue (The Record reported $232,000 and said he helped run it for nearly a decade). BleepingComputer reported sales were paid in cryptocurrency, with Rydox retaining 40% of proceeds. Kutleshi was arrested in Kosovo in December 2024 alongside administrators Jetmir Kutleshi and Shpend Sokoli in a joint operation involving the FBI, Kosovo police, Albania's SPAK, and the Royal Malaysian Police (The Record credited Albania and Malaysia with assisting), and was extradited to the US in 2025. The FBI seized rydox.cc in December 2024; SecurityWeek reported authorities also seized its servers and about $225,000 in cryptocurrency. He faces a mandatory minimum of two years on the identity-theft count and up to 20 years for money laundering — exposure BleepingComputer totals as a maximum of 22 years — with sentencing scheduled for February 9, 2027 (The Record reported sentencing in February). The Record added that his brother previously pleaded guilty, received time served, and was deported to Kosovo. DataBreaches.net described the plea more generally as charges related to creating and operating the marketplace rather than naming specific counts, and noted the announcement concerns a guilty plea rather than a newly observed attack.

• Ardit Kutleshi, 28, a Kosovar national, pleaded guilty in US court to aggravated identity theft and money laundering conspiracy for creating and operating the Rydox cybercrime marketplace (The Record, BleepingComputer, SecurityWeek;…
• Rydox sold stolen US personal data including credentials, payment-card data, and SSNs, plus device access, phishing kits, and stealer logs.
• SecurityWeek reported the marketplace listed about 321,372 products (BleepingComputer: over 321,000) for roughly 18,000 users, generating more than 7,600 transactions and at least $232,000 in revenue.
• The site operated from February 2016 (BleepingComputer) or 2016 (SecurityWeek) until its December 2024 shutdown — nearly a decade per The Record.
• BleepingComputer: sales were paid in cryptocurrency, with Rydox retaining 40% of proceeds.
• Kutleshi was arrested in Kosovo in December 2024 alongside administrators Jetmir Kutleshi and Shpend Sokoli, and extradited to the US in 2025.
• The takedown involved the FBI, Kosovo police, Albania's SPAK, and the Royal Malaysian Police (BleepingComputer); The Record said Albania and Malaysia assisted.
• The FBI seized rydox.cc in December 2024; SecurityWeek reported authorities also seized its servers and about $225,000 in cryptocurrency.