Conti Ransomware

Conti Ransomware

Case Number: 3:23-CR-00092
Defendant(s): Maksim Galochkin, Maksim Rudenskiy, Mikhail Tsarev, and Andrey Zhuykov

Case Number: 3:23-CR-00088
Defendant(s): Oleksii Lytvynenko

Conti ransomware was a malicious software that affected more than 900 businesses, nonprofits, governments, and other victims in the United States and around the world. Victims of Conti ransomware should contact their local FBI field office for further information. For additional information on ransomware, including Conti, please visit www.StopRansomware.gov.

After a defendant is charged with a federal crime, victims are entitled to be notified of public court proceedings. In most instances, victims will receive an initial notification from the Victim Notification System (VNS) and subsequent notifications as case events warrant. Occasionally, in cases involving large numbers of victims, alternative notification procedures may be used. Future updates regarding this case will be posted here and on the X account (formerly known as Twitter) of the U.S. Attorney’s Office for the Middle District of Tennessee (@USAO_MDTN).

UPCOMING COURT PROCEEDINGS

CASE UPDATES

September 10, 2026: Defendant Oleksii Lytvynenko was sentenced to 48 months in prison following his June 2026 plea of guilty to conspiracy to commit wire fraud.  Press Release. The Court withheld the determination as to restitution, which will be finalized no later than November 16, 2026. Please see additional information under the “Restitution” section below.

June 10, 2026: Defendant Oleksii Lytvynenko entered a plea of guilty to Count 2 of the indictment, conspiracy to commit wire fraud, pursuant to a plea agreement with the United States. Press Release. He is scheduled to be sentenced on September 10, 2026, and victims may provide restitution requests and supporting documents to the United States Attorney’s Office in advance of sentencing using the Victim Impact Statement form linked below.

November 7, 2025: For his role in the Conti ransomware conspiracy, the defendant, Oleksii Lytvynenko is charged with conspiracy to deploy Conti, a ransomware variant that infected victim computers and networks, encrypting their data. Defendants are presumed innocent until proven guilty beyond a reasonable doubt in a court of law. Press Release

September 7, 2023: For their roles in the Conti ransomware conspiracy, the defendants, Maksim Galochkin, Maksim Rudenskiy, Mikhail Tsarev, and Andrey Zhuykov, are charged with conspiracy to violate the Computer Fraud and Abuse Act and conspiracy to commit wire fraud. All defendants are presumed innocent until proven guilty beyond a reasonable doubt in a court of law. Press Release

VICTIMS' RIGHTS

Federal crime victims have several rights, as set forth in the Justice for All Act of 2004, 18 U.S.C. §3771. Learn More

RESTITUTION

The Court has reserved its determination of the restitution amount in connection with the sentencing of defendant Oleksii Lytvynenko. Victims who intend to submit additional restitution information should send their requests and supporting documentation to USATNM.Conti.Victims@usdoj.gov by Friday, October 9, 2026.