Ransomware Group Enforcer Sentenced to 102 Months for Extortion Role
Summary
Deniss Zolotarjovs was sentenced to 102 months for helping a Russia-based ransomware organization extort victims. DOJ documents describe his use of stolen sensitive data and estimate the group’s losses likely reached hundreds of millions of dollars.
Key points
- Zolotarjovs pleaded guilty to conspiring to commit money laundering and wire fraud in July 2025.
- Court documents say he analyzed stolen data and used sensitive information to increase pressure on victims.
- In one case involving a pediatric healthcare company, he leveraged children’s health information and urged collaborators to leak or sell it.
- The organization stole data from more than 54 companies during his participation from approximately June 2021 to August 2023.
- Attacks on 13 companies resulted in more than $56 million in losses, including about $2.8 million in ransom payments; DOJ estimates total losses likely reached hundreds of millions.
- Zolotarjovs was arrested in Georgia in December 2023 and transferred to U.S. custody in August 2024.
Article Details
- Event Type
- Sentencing of a ransomware-organization enforcer who pleaded guilty to money laundering and wire fraud conspiracy.
- Impact
- Deniss Zolotarjovs was sentenced to 102 months in prison. During his participation, the organization stole data from more than 54 companies. Attacks on 13 known victims caused over $56 million in losses, including approximately $2.8 million in ransom payments; the government estimates total losses were likely in the hundreds of millions, while noting that the estimate is uncertain and excludes some victims. Stolen data included sensitive pediatric health records, and attacks also exposed personal information and resulted in a government entity’s 911 system being shut down.
People
Andrew Tysen DuvaAssistant Attorney General of the Justice Department’s Criminal Division; commented on Zolotarjovs’s sentencing and the prosecution.Benjamin A. BleibergTrial Attorney in the Criminal Division’s Computer Crime and Intellectual Property Section who prosecuted the case.Bryce B. RosenbowerSenior Counsel in the Criminal Division’s Computer Crime and Intellectual Property Section who prosecuted the case.Dominick S. Gerace IIU.S. Attorney for the Southern District of Ohio; commented on the prosecution and sentencing.Jason CromartieSpecial Agent in Charge of the FBI Cincinnati Field Office, which investigated the case.Timothy S. ManganAssistant Deputy Criminal Chief for the Southern District of Ohio who prosecuted the case.
Threat Actors
AkiraNamed as one of the ransomware brands used in ransom notes by the organization in which Zolotarjovs participated.ContiNamed as one of the ransomware brands used in ransom notes by the organization in which Zolotarjovs participated; the article says the organization was led by former Conti leaders.Deniss ZolotarjovsThe article identifies him as an enforcer in the ransomware organization who analyzed stolen victim data and used sensitive information to increase extortion pressure. He pleaded guilty to money laundering and wire fraud conspiracy and was sentenced to 102 months in prison.KarakurtNamed as one of the ransomware brands used in ransom notes by the organization in which Zolotarjovs participated.RoyalNamed as one of the ransomware brands used in ransom notes by the organization in which Zolotarjovs participated.SchoolBoysNamed as one of the ransomware brands used in ransom notes by the organization in which Zolotarjovs participated.TommyLeaksNamed as one of the ransomware brands used in ransom notes by the organization in which Zolotarjovs participated.
Countries
GeorgiaHe escalated extortion by analyzing stolen data and exploiting sensitive information — including pediatric health records — and was arrested in Georgia, extradited to the United States, and prosecuted by the DOJ and FBI.RussiaA Latvian national, Deniss Zolotarjovs, was sentenced to 102 months for his role as an enforcer in a Russia-based ransomware organization that stole data from over 54 companies and contributed to hundreds of millions inUnited StatesHe escalated extortion by analyzing stolen data and exploiting sensitive information — including pediatric health records — and was arrested in Georgia, extradited to the United States, and prosecuted by the DOJ and FBI.
Industries
Government“Deniss Zolotarjovs helped his ransomware gang profit from hacks of dozens of companies, and even on a government entity whose 911 system was forced offline.HealthcareIn one attack on a pediatric healthcare company, Zolotarjovs deliberately leveraged children’s health information for extortion.