Public record database

Corrections log

Every record in the index was read back against its sources. Where a value did not survive that check it was changed, and every change is listed here: the record it belongs to, the field, the value before, the value now, the reason, and the source that settled it.

138 corrections Each with the value before and the value now

45 records affected Of 108 records in the index

Research cutoff August 21, 2026

138 corrections across 45 of the 108 records in the index, in 14 fields.

In 10 of them the value recorded before and the value recorded after are the same. The audit dataset carries them that way and this log does not alter them.

What a correction means. A correction is the audit changing a value it could not confirm against a source, not the index withdrawing a claim. The value that was there before is kept and published here, so every change can be checked against the source that settled it.

Showing 101 to 138 of 138 corrections

Field corrected

Record

Record	Field	Was	Now	Why it changed	Source
INTERPOL Operation Secure	Announcement date	Not recorded	2025-06-11	INTERPOL publication date.	Operation Secure: INTERPOL-coordinated action takes down 20,000+ malicious IPs and domains Open Operation Secure: INTERPOL-coordinated action takes down 20,000+ malicious IPs and domains at the publisher
INTERPOL Operation Secure	What came down	More than 20,000 malicious IPs/domains taken down; 41 servers seized.	More than 20,000 malicious IP addresses and domains taken down; 41 servers seized; 32 arrests; more than 216,000 victims notified or identified.	Official INTERPOL result set.	Operation Secure: INTERPOL-coordinated action takes down 20,000+ malicious IPs and domains Open Operation Secure: INTERPOL-coordinated action takes down 20,000+ malicious IPs and domains at the publisher
Serengeti 2.0	Start date	2025-08-22	Not recorded	INTERPOL gives only June-August 2025; an exact start day was not published.	Operation Serengeti 2.0 disrupts over 11,000 malicious cyber infrastructures in Africa Open Operation Serengeti 2.0 disrupts over 11,000 malicious cyber infrastructures in Africa at the publisher
Serengeti 2.0	End date	2025-08-22	Not recorded	INTERPOL gives only June-August 2025; an exact end day was not published.	Operation Serengeti 2.0 disrupts over 11,000 malicious cyber infrastructures in Africa Open Operation Serengeti 2.0 disrupts over 11,000 malicious cyber infrastructures in Africa at the publisher
Serengeti 2.0	Announcement date	Not recorded	2025-08-22	INTERPOL publication date.	Operation Serengeti 2.0 disrupts over 11,000 malicious cyber infrastructures in Africa Open Operation Serengeti 2.0 disrupts over 11,000 malicious cyber infrastructures in Africa at the publisher
Serengeti 2.0	Reported apprehended count	Not recorded	1209	INTERPOL reported 1,209 arrests.	Operation Serengeti 2.0 disrupts over 11,000 malicious cyber infrastructures in Africa Open Operation Serengeti 2.0 disrupts over 11,000 malicious cyber infrastructures in Africa at the publisher
Serengeti 2.0	What came down	More than 11,000 malicious infrastructures disrupted.	11,432 malicious infrastructures dismantled; approximately USD 97.4 million recovered; 88,000 victims identified across 18 African countries and the United Kingdom.	Official INTERPOL results; exact action-day range remains unknown.	Operation Serengeti 2.0 disrupts over 11,000 malicious cyber infrastructures in Africa Open Operation Serengeti 2.0 disrupts over 11,000 malicious cyber infrastructures in Africa at the publisher
Operation PowerOFF December 2022 wave	Reported apprehended count	Not recorded	7	Europol reported seven administrators arrested internationally; DOJ separately charged six U.S.-based defendants. These aggregates are not summed.	Federal Prosecutors in Los Angeles and Alaska Charge 6 Defendants with Operating Websites that Offer Computer Attack Services Open Federal Prosecutors in Los Angeles and Alaska Charge 6 Defendants with Operating Websites that Offer Computer Attack Services at the publisher, Europol statement on the December 2022 Operation PowerOFF wave Open Europol statement on the December 2022 Operation PowerOFF wave at the publisher
CityXGuide seizure	Start date	2020-06-01	2020-06-19	The site seizure was announced and implemented June 19, 2020; the indictment had been returned June 2.	CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy Open CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy at the publisher, CityXGuide seized; owner Wilhan Martono charged Open CityXGuide seized; owner Wilhan Martono charged at the publisher
CityXGuide seizure	End date	2020-06-01	2020-06-19	Single-day infrastructure seizure.	CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy Open CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy at the publisher, CityXGuide seized; owner Wilhan Martono charged Open CityXGuide seized; owner Wilhan Martono charged at the publisher
CityXGuide seizure	Announcement date	Not recorded	2020-06-19	DOJ publication date.	CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy Open CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy at the publisher, CityXGuide seized; owner Wilhan Martono charged Open CityXGuide seized; owner Wilhan Martono charged at the publisher
CityXGuide seizure	Reported apprehended count	Not recorded	1	Owner Wilhan Martono was arrested; official DOJ releases conflict between June 17 and June 19, preserved in notes.	CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy Open CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy at the publisher, CityXGuide seized; owner Wilhan Martono charged Open CityXGuide seized; owner Wilhan Martono charged at the publisher
CityXGuide seizure	Reported convicted count	Not recorded	1	Martono pleaded guilty and was sentenced.	CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy Open CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy at the publisher, CityXGuide seized; owner Wilhan Martono charged Open CityXGuide seized; owner Wilhan Martono charged at the publisher
CityXGuide seizure	What happened afterward	Not recorded	Wilhan Martono pleaded guilty on 2021-08-24 and was sentenced on 2022-11-14 to 97 months in prison and forfeiture exceeding USD 15 million. DOJ releases conflict on whether his arrest occurred June 17 or June 19, 2020.	Current official case outcome and explicit date conflict.	CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy Open CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy at the publisher, CityXGuide seized; owner Wilhan Martono charged Open CityXGuide seized; owner Wilhan Martono charged at the publisher
BTC-e disruption	What happened afterward	Not recorded	Alexander Vinnik pleaded guilty on 2024-05-03. Before sentencing, the United States released him in a prisoner exchange; he arrived in Moscow on 2025-02-13.	Current status based on DOJ and Reuters.	BTC-e Operator Pleads Guilty to Money Laundering Conspiracy Open BTC-e Operator Pleads Guilty to Money Laundering Conspiracy at the publisher, BTC-e cryptocurrency exchange dismantled; operator Alexander Vinnik arrested Open BTC-e cryptocurrency exchange dismantled; operator Alexander Vinnik arrested at the publisher, Russian Alexander Vinnik back in Moscow after prisoner swap, RIA news agency says Open Russian Alexander Vinnik back in Moscow after prisoner swap, RIA news agency says at the publisher
Bitzlato / Operation Cryptostorm	Reported convicted count	Not recorded	1	Anatoly Legkodymov pleaded guilty on 2023-12-06.	Bitzlato dismantled; founder Anatoly Legkodymov charged Open Bitzlato dismantled; founder Anatoly Legkodymov charged at the publisher, Founder and Majority Owner of Cryptocurrency Exchange Pleads Guilty to Unlicensed Money Transmitting Open Founder and Majority Owner of Cryptocurrency Exchange Pleads Guilty to Unlicensed Money Transmitting at the publisher
Bitzlato / Operation Cryptostorm	What happened afterward	Not recorded	Anatoly Legkodymov pleaded guilty on 2023-12-06 to operating an unlicensed money-transmitting business and agreed to dissolve Bitzlato and relinquish claims to approximately USD 23 million in seized assets. No later official sentencing release was located in this pass.	Verified current outcome through the latest located official source.	Bitzlato dismantled; founder Anatoly Legkodymov charged Open Bitzlato dismantled; founder Anatoly Legkodymov charged at the publisher, Founder and Majority Owner of Cryptocurrency Exchange Pleads Guilty to Unlicensed Money Transmitting Open Founder and Majority Owner of Cryptocurrency Exchange Pleads Guilty to Unlicensed Money Transmitting at the publisher
Kingdom Market seizure	Reported charged count	Not recorded	1	Alan Bill was charged by complaint and then a ten-count indictment.	Kingdom Market darknet marketplace dismantled; administrator Alan Bill arrested Open Kingdom Market darknet marketplace dismantled; administrator Alan Bill arrested at the publisher, Slovakian Administrator of Darknet Market that Sold Drugs and Stolen Personal Information Sentenced to 200 Months in Prison Open Slovakian Administrator of Darknet Market that Sold Drugs and Stolen Personal Information Sentenced to 200 Months in Prison at the publisher, Slovakian Man Admits Aiding Darknet Market that Sold Drugs and Stolen Personal Information Open Slovakian Man Admits Aiding Darknet Market that Sold Drugs and Stolen Personal Information at the publisher
Kingdom Market seizure	Reported convicted count	Not recorded	1	Bill pleaded guilty in January 2026.	Kingdom Market darknet marketplace dismantled; administrator Alan Bill arrested Open Kingdom Market darknet marketplace dismantled; administrator Alan Bill arrested at the publisher, Slovakian Administrator of Darknet Market that Sold Drugs and Stolen Personal Information Sentenced to 200 Months in Prison Open Slovakian Administrator of Darknet Market that Sold Drugs and Stolen Personal Information Sentenced to 200 Months in Prison at the publisher, Slovakian Man Admits Aiding Darknet Market that Sold Drugs and Stolen Personal Information Open Slovakian Man Admits Aiding Darknet Market that Sold Drugs and Stolen Personal Information at the publisher
Kingdom Market seizure	What happened afterward	Not recorded	Alan Bill was arrested on 2023-12-15, pleaded guilty on 2026-01-27, and was sentenced on 2026-05-07 (announced May 8) to 200 months in prison.	Verified final case status.	Kingdom Market darknet marketplace dismantled; administrator Alan Bill arrested Open Kingdom Market darknet marketplace dismantled; administrator Alan Bill arrested at the publisher, Slovakian Administrator of Darknet Market that Sold Drugs and Stolen Personal Information Sentenced to 200 Months in Prison Open Slovakian Administrator of Darknet Market that Sold Drugs and Stolen Personal Information Sentenced to 200 Months in Prison at the publisher, Slovakian Man Admits Aiding Darknet Market that Sold Drugs and Stolen Personal Information Open Slovakian Man Admits Aiding Darknet Market that Sold Drugs and Stolen Personal Information at the publisher
Dridex/Bugat/Cridex disruption	Reported convicted count	Not recorded	1	Andrey Ghinkul pleaded guilty to two counts.	Dridex botnet disrupted; administrator Andrey Ghinkul charged Open Dridex botnet disrupted; administrator Andrey Ghinkul charged at the publisher, Moldovan Pleads Guilty to Distributing Bugat Malware Open Moldovan Pleads Guilty to Distributing Bugat Malware at the publisher, Moldovan Sentenced for Distributing Multifunction Malware Package Open Moldovan Sentenced for Distributing Multifunction Malware Package at the publisher
Dridex/Bugat/Cridex disruption	What happened afterward	Not recorded	Andrey Ghinkul was extradited from Cyprus to the United States in February 2016, pleaded guilty on 2017-02-08, and was sentenced on 2018-12-06 to time served.	Verified final case outcome.	Dridex botnet disrupted; administrator Andrey Ghinkul charged Open Dridex botnet disrupted; administrator Andrey Ghinkul charged at the publisher, Moldovan Pleads Guilty to Distributing Bugat Malware Open Moldovan Pleads Guilty to Distributing Bugat Malware at the publisher, Moldovan Sentenced for Distributing Multifunction Malware Package Open Moldovan Sentenced for Distributing Multifunction Malware Package at the publisher
Samourai Wallet seizure	Reported convicted count	Not recorded	2	Both founders pleaded guilty on 2025-07-30.	Founders of Samourai Wallet Cryptocurrency Mixing Service Plead Guilty Open Founders of Samourai Wallet Cryptocurrency Mixing Service Plead Guilty at the publisher, Founders of Samourai Wallet Cryptocurrency Mixing Service Sentenced to Five and Four Years in Prison Open Founders of Samourai Wallet Cryptocurrency Mixing Service Sentenced to Five and Four Years in Prison at the publisher, Samourai Wallet founders arrested; infrastructure seized Open Samourai Wallet founders arrested; infrastructure seized at the publisher
Samourai Wallet seizure	What happened afterward	Not recorded	Keonne Rodriguez and William Lonergan Hill pleaded guilty on 2025-07-30. Rodriguez was sentenced on 2025-11-06 to five years; Hill was sentenced on 2025-11-19 to four years. Each also received three years of supervised release and a USD 250,000 fine.	Verified final case outcomes.	Founders of Samourai Wallet Cryptocurrency Mixing Service Plead Guilty Open Founders of Samourai Wallet Cryptocurrency Mixing Service Plead Guilty at the publisher, Founders of Samourai Wallet Cryptocurrency Mixing Service Sentenced to Five and Four Years in Prison Open Founders of Samourai Wallet Cryptocurrency Mixing Service Sentenced to Five and Four Years in Prison at the publisher, Samourai Wallet founders arrested; infrastructure seized Open Samourai Wallet founders arrested; infrastructure seized at the publisher
Operation Cronos wave 1	What happened afterward	LockBit relaunched on new infrastructure within days; further charges and sanctions followed in May 2024.	LockBit relaunched after the February 2024 disruption. Mikhail Vasiliev and Ruslan Astamirov pleaded guilty on 2024-07-18 and were still awaiting sentencing in the latest located official update. Rostislav Panev was arrested in Israel in August 2024, extradited on 2025-03-13, and detained pending trial. Artur Sungatov, Ivan Kondratyev, Mikhail Matveev and Dmitry Khoroshev remained at large in the latest located official update.	Updated individual case statuses.	Dual Russian and Israeli National Extradited to the United States for His Role in the LockBit Ransomware Conspiracy Open Dual Russian and Israeli National Extradited to the United States for His Role in the LockBit Ransomware Conspiracy at the publisher, Two Foreign Nationals Plead Guilty to Participation in LockBit Ransomware Group Open Two Foreign Nationals Plead Guilty to Participation in LockBit Ransomware Group at the publisher
Operation Trojan Shield	Reported apprehended count	800	1200	The 2025 DOJ case update reports approximately 1,200 arrests over the investigation, superseding the initial 800-plus figure.	All Extradited Distributors of ANOM Hardened Encrypted Devices Plead Guilty to Racketeering Conspiracy Open All Extradited Distributors of ANOM Hardened Encrypted Devices Plead Guilty to Racketeering Conspiracy at the publisher
Operation Trojan Shield	Reported convicted count	Not recorded	8	All eight defendants extradited to the United States as of 2025-02-07 had pleaded guilty.	All Extradited Distributors of ANOM Hardened Encrypted Devices Plead Guilty to Racketeering Conspiracy Open All Extradited Distributors of ANOM Hardened Encrypted Devices Plead Guilty to Racketeering Conspiracy at the publisher
Operation Trojan Shield	Reported fugitive count	Not recorded	1	DOJ states one of the 17 San Diego defendants remained a fugitive; eight others were arrested abroad but not yet extradited.	All Extradited Distributors of ANOM Hardened Encrypted Devices Plead Guilty to Racketeering Conspiracy Open All Extradited Distributors of ANOM Hardened Encrypted Devices Plead Guilty to Racketeering Conspiracy at the publisher
Operation Trojan Shield	What happened afterward	17 defendants indicted in the Southern District of California; multiple extraditions and guilty pleas through 2024 and 2025.	Seventeen distributors were indicted in the Southern District of California. By 2025-02-07, all eight defendants extradited to the United States had pleaded guilty; eight additional defendants had been arrested abroad but not extradited, and one remained a fugitive. The broader operation produced approximately 1,200 arrests worldwide.	Current official prosecution status.	All Extradited Distributors of ANOM Hardened Encrypted Devices Plead Guilty to Racketeering Conspiracy Open All Extradited Distributors of ANOM Hardened Encrypted Devices Plead Guilty to Racketeering Conspiracy at the publisher
Megaupload seizure	What happened afterward	Not recorded	The United States prosecution remains pending as to Kim Dotcom. New Zealand’s High Court rejected his judicial-review challenge in [2025] NZHC 2634, and the Court of Appeal dismissed his appeal on 2026-07-01 in [2026] NZCA 284; a potential Supreme Court route remained. Co-defendant Andrus Nomm pleaded guilty in 2015; Mathias Ortmann and Bram van der Kolk entered New Zealand guilty pleas and were sentenced there.	Updated extradition and co-defendant status; not all foreign proceedings are normalized as U.S. convictions.	Dotcom v Minister of Justice [2025] NZHC 2634 Open Dotcom v Minister of Justice [2025] NZHC 2634 at the publisher, Dotcom v Minister of Justice [2026] NZCA 284 Open Dotcom v Minister of Justice [2026] NZCA 284 at the publisher, Megaupload indictment and seizure announcement Open Megaupload indictment and seizure announcement at the publisher
Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption	Reported charged count	Not recorded	1	Jacob Butler was charged April 10, 2026 in connection with KimWolf.	Canadian Man Arrested by International Authorities, Charged with Administrating KimWolf DDoS Botnet Open Canadian Man Arrested by International Authorities, Charged with Administrating KimWolf DDoS Botnet at the publisher, Coordinated disruption of Aisuru, KimWolf, JackSkid, and Mossad IoT DDoS botnets Open Coordinated disruption of Aisuru, KimWolf, JackSkid, and Mossad IoT DDoS botnets at the publisher
Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption	Reported apprehended count	Not recorded	1	Butler was arrested in Ottawa on May 20, 2026 under an extradition warrant.	Canadian Man Arrested by International Authorities, Charged with Administrating KimWolf DDoS Botnet Open Canadian Man Arrested by International Authorities, Charged with Administrating KimWolf DDoS Botnet at the publisher, Coordinated disruption of Aisuru, KimWolf, JackSkid, and Mossad IoT DDoS botnets Open Coordinated disruption of Aisuru, KimWolf, JackSkid, and Mossad IoT DDoS botnets at the publisher
Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption	What happened afterward	Not recorded	Jacob Butler, alleged administrator of the KimWolf component, was charged in the District of Alaska on 2026-04-10 and arrested in Canada on 2026-05-20 pursuant to an extradition warrant. The complaint was unsealed May 21; extradition/prosecution remained pending at the cutoff.	New person/case development after the infrastructure action.	Canadian Man Arrested by International Authorities, Charged with Administrating KimWolf DDoS Botnet Open Canadian Man Arrested by International Authorities, Charged with Administrating KimWolf DDoS Botnet at the publisher, Coordinated disruption of Aisuru, KimWolf, JackSkid, and Mossad IoT DDoS botnets Open Coordinated disruption of Aisuru, KimWolf, JackSkid, and Mossad IoT DDoS botnets at the publisher
Backpage.com seizure	Reported convicted count	Not recorded	5	Lacey, Spear and Brunst were convicted at trial; Ferrer and Hyer pleaded guilty. Larkin died before trial.	Backpage Principals Convicted of $500M Prostitution Promotion Scheme Open Backpage Principals Convicted of $500M Prostitution Promotion Scheme at the publisher, Justice Department leads seizure of Backpage.com, indicts founders Open Justice Department leads seizure of Backpage.com, indicts founders at the publisher, Three Owners of Notorious Prostitution Website Backpage Sentenced Open Three Owners of Notorious Prostitution Website Backpage Sentenced at the publisher, United States v. Backpage case information and docket updates Open United States v. Backpage case information and docket updates at the publisher
Backpage.com seizure	What happened afterward	Not recorded	Michael Lacey was sentenced to 60 months, Scott Spear to 120 months, and John “Jed” Brunst to 120 months on 2024-08-28. Carl Ferrer and Dan Hyer had pleaded guilty; Hyer was later sentenced to time served in September 2025. James Larkin died before trial. Appeals and forfeiture proceedings continued.	Updated individual outcomes and docket status.	Backpage Principals Convicted of $500M Prostitution Promotion Scheme Open Backpage Principals Convicted of $500M Prostitution Promotion Scheme at the publisher, Justice Department leads seizure of Backpage.com, indicts founders Open Justice Department leads seizure of Backpage.com, indicts founders at the publisher, Three Owners of Notorious Prostitution Website Backpage Sentenced Open Three Owners of Notorious Prostitution Website Backpage Sentenced at the publisher, United States v. Backpage case information and docket updates Open United States v. Backpage case information and docket updates at the publisher
3ve ad-fraud botnet disruption	Reported apprehended count	Not recorded	3	DOJ reported three defendants arrested at the November 2018 announcement; eight were charged.	Nine charged in $36 million digital advertising fraud scheme (3ve/Methbot)Open Nine charged in $36 million digital advertising fraud scheme (3ve/Methbot) at the publisher
BestMixer seizure	What came down	Servers seized in the Netherlands, Luxembourg, and elsewhere; domain taken offline.	Six servers were seized in the Netherlands and Luxembourg and BestMixer.io was taken offline.	Official Europol figure replaces the generic description.	BestMixer.io taken down in first action of its kind against crypto mixing service Open BestMixer.io taken down in first action of its kind against crypto mixing service at the publisher
PowerOFF eight-domain action (April 2026, USAO Alaska wave)	Record kind	incident	incident_component	Reclassified to prevent double-counting the overlapping U.S. component and global April 2026 wave.	Europol statement on the April 2026 Operation PowerOFF wave Open Europol statement on the April 2026 Operation PowerOFF wave at the publisher, PowerOFF: eight DDoS-for-hire domains seized Open PowerOFF: eight DDoS-for-hire domains seized at the publisher

INTERPOL Operation Secure
Announcement date

Was: Not recorded

Now: 2025-06-11

INTERPOL publication date.
Operation Secure: INTERPOL-coordinated action takes down 20,000+ malicious IPs and domains Open Operation Secure: INTERPOL-coordinated action takes down 20,000+ malicious IPs and domains at the publisher
INTERPOL Operation Secure
What came down

Was: More than 20,000 malicious IPs/domains taken down; 41 servers seized.

Now: More than 20,000 malicious IP addresses and domains taken down; 41 servers seized; 32 arrests; more than 216,000 victims notified or identified.

Official INTERPOL result set.
Operation Secure: INTERPOL-coordinated action takes down 20,000+ malicious IPs and domains Open Operation Secure: INTERPOL-coordinated action takes down 20,000+ malicious IPs and domains at the publisher
Serengeti 2.0
Start date

Was: 2025-08-22

Now: Not recorded

INTERPOL gives only June-August 2025; an exact start day was not published.
Operation Serengeti 2.0 disrupts over 11,000 malicious cyber infrastructures in Africa Open Operation Serengeti 2.0 disrupts over 11,000 malicious cyber infrastructures in Africa at the publisher
Serengeti 2.0
End date

Was: 2025-08-22

Now: Not recorded

INTERPOL gives only June-August 2025; an exact end day was not published.
Operation Serengeti 2.0 disrupts over 11,000 malicious cyber infrastructures in Africa Open Operation Serengeti 2.0 disrupts over 11,000 malicious cyber infrastructures in Africa at the publisher
Serengeti 2.0
Announcement date

Was: Not recorded

Now: 2025-08-22

INTERPOL publication date.
Operation Serengeti 2.0 disrupts over 11,000 malicious cyber infrastructures in Africa Open Operation Serengeti 2.0 disrupts over 11,000 malicious cyber infrastructures in Africa at the publisher
Serengeti 2.0
Reported apprehended count

Was: Not recorded

Now: 1209

INTERPOL reported 1,209 arrests.
Operation Serengeti 2.0 disrupts over 11,000 malicious cyber infrastructures in Africa Open Operation Serengeti 2.0 disrupts over 11,000 malicious cyber infrastructures in Africa at the publisher
Serengeti 2.0
What came down

Was: More than 11,000 malicious infrastructures disrupted.

Now: 11,432 malicious infrastructures dismantled; approximately USD 97.4 million recovered; 88,000 victims identified across 18 African countries and the United Kingdom.

Official INTERPOL results; exact action-day range remains unknown.
Operation Serengeti 2.0 disrupts over 11,000 malicious cyber infrastructures in Africa Open Operation Serengeti 2.0 disrupts over 11,000 malicious cyber infrastructures in Africa at the publisher
Operation PowerOFF December 2022 wave
Reported apprehended count

Was: Not recorded

Now: 7

Europol reported seven administrators arrested internationally; DOJ separately charged six U.S.-based defendants. These aggregates are not summed.
Federal Prosecutors in Los Angeles and Alaska Charge 6 Defendants with Operating Websites that Offer Computer Attack Services Open Federal Prosecutors in Los Angeles and Alaska Charge 6 Defendants with Operating Websites that Offer Computer Attack Services at the publisher, Europol statement on the December 2022 Operation PowerOFF wave Open Europol statement on the December 2022 Operation PowerOFF wave at the publisher
CityXGuide seizure
Start date

Was: 2020-06-01

Now: 2020-06-19

The site seizure was announced and implemented June 19, 2020; the indictment had been returned June 2.
CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy Open CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy at the publisher, CityXGuide seized; owner Wilhan Martono charged Open CityXGuide seized; owner Wilhan Martono charged at the publisher
CityXGuide seizure
End date

Was: 2020-06-01

Now: 2020-06-19

Single-day infrastructure seizure.
CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy Open CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy at the publisher, CityXGuide seized; owner Wilhan Martono charged Open CityXGuide seized; owner Wilhan Martono charged at the publisher
CityXGuide seizure
Announcement date

Was: Not recorded

Now: 2020-06-19

DOJ publication date.
CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy Open CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy at the publisher, CityXGuide seized; owner Wilhan Martono charged Open CityXGuide seized; owner Wilhan Martono charged at the publisher
CityXGuide seizure
Reported apprehended count

Was: Not recorded

Now: 1

Owner Wilhan Martono was arrested; official DOJ releases conflict between June 17 and June 19, preserved in notes.
CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy Open CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy at the publisher, CityXGuide seized; owner Wilhan Martono charged Open CityXGuide seized; owner Wilhan Martono charged at the publisher
CityXGuide seizure
Reported convicted count

Was: Not recorded

Now: 1

Martono pleaded guilty and was sentenced.
CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy Open CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy at the publisher, CityXGuide seized; owner Wilhan Martono charged Open CityXGuide seized; owner Wilhan Martono charged at the publisher
CityXGuide seizure
What happened afterward

Was: Not recorded

Now: Wilhan Martono pleaded guilty on 2021-08-24 and was sentenced on 2022-11-14 to 97 months in prison and forfeiture exceeding USD 15 million. DOJ releases conflict on whether his arrest occurred June 17 or June 19, 2020.

Current official case outcome and explicit date conflict.
CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy Open CityXGuide Owner Sentenced to 8+ Years in Prison for Reckless Disregard of Sex Trafficking, Racketeering Conspiracy at the publisher, CityXGuide seized; owner Wilhan Martono charged Open CityXGuide seized; owner Wilhan Martono charged at the publisher
BTC-e disruption
What happened afterward

Was: Not recorded

Now: Alexander Vinnik pleaded guilty on 2024-05-03. Before sentencing, the United States released him in a prisoner exchange; he arrived in Moscow on 2025-02-13.

Current status based on DOJ and Reuters.
BTC-e Operator Pleads Guilty to Money Laundering Conspiracy Open BTC-e Operator Pleads Guilty to Money Laundering Conspiracy at the publisher, BTC-e cryptocurrency exchange dismantled; operator Alexander Vinnik arrested Open BTC-e cryptocurrency exchange dismantled; operator Alexander Vinnik arrested at the publisher, Russian Alexander Vinnik back in Moscow after prisoner swap, RIA news agency says Open Russian Alexander Vinnik back in Moscow after prisoner swap, RIA news agency says at the publisher
Bitzlato / Operation Cryptostorm
Reported convicted count

Was: Not recorded

Now: 1

Anatoly Legkodymov pleaded guilty on 2023-12-06.
Bitzlato dismantled; founder Anatoly Legkodymov charged Open Bitzlato dismantled; founder Anatoly Legkodymov charged at the publisher, Founder and Majority Owner of Cryptocurrency Exchange Pleads Guilty to Unlicensed Money Transmitting Open Founder and Majority Owner of Cryptocurrency Exchange Pleads Guilty to Unlicensed Money Transmitting at the publisher
Bitzlato / Operation Cryptostorm
What happened afterward

Was: Not recorded

Now: Anatoly Legkodymov pleaded guilty on 2023-12-06 to operating an unlicensed money-transmitting business and agreed to dissolve Bitzlato and relinquish claims to approximately USD 23 million in seized assets. No later official sentencing release was located in this pass.

Verified current outcome through the latest located official source.
Bitzlato dismantled; founder Anatoly Legkodymov charged Open Bitzlato dismantled; founder Anatoly Legkodymov charged at the publisher, Founder and Majority Owner of Cryptocurrency Exchange Pleads Guilty to Unlicensed Money Transmitting Open Founder and Majority Owner of Cryptocurrency Exchange Pleads Guilty to Unlicensed Money Transmitting at the publisher
Kingdom Market seizure
Reported charged count

Was: Not recorded

Now: 1

Alan Bill was charged by complaint and then a ten-count indictment.
Kingdom Market darknet marketplace dismantled; administrator Alan Bill arrested Open Kingdom Market darknet marketplace dismantled; administrator Alan Bill arrested at the publisher, Slovakian Administrator of Darknet Market that Sold Drugs and Stolen Personal Information Sentenced to 200 Months in Prison Open Slovakian Administrator of Darknet Market that Sold Drugs and Stolen Personal Information Sentenced to 200 Months in Prison at the publisher, Slovakian Man Admits Aiding Darknet Market that Sold Drugs and Stolen Personal Information Open Slovakian Man Admits Aiding Darknet Market that Sold Drugs and Stolen Personal Information at the publisher
Kingdom Market seizure
Reported convicted count

Was: Not recorded

Now: 1

Bill pleaded guilty in January 2026.
Kingdom Market darknet marketplace dismantled; administrator Alan Bill arrested Open Kingdom Market darknet marketplace dismantled; administrator Alan Bill arrested at the publisher, Slovakian Administrator of Darknet Market that Sold Drugs and Stolen Personal Information Sentenced to 200 Months in Prison Open Slovakian Administrator of Darknet Market that Sold Drugs and Stolen Personal Information Sentenced to 200 Months in Prison at the publisher, Slovakian Man Admits Aiding Darknet Market that Sold Drugs and Stolen Personal Information Open Slovakian Man Admits Aiding Darknet Market that Sold Drugs and Stolen Personal Information at the publisher
Kingdom Market seizure
What happened afterward

Was: Not recorded

Now: Alan Bill was arrested on 2023-12-15, pleaded guilty on 2026-01-27, and was sentenced on 2026-05-07 (announced May 8) to 200 months in prison.

Verified final case status.
Kingdom Market darknet marketplace dismantled; administrator Alan Bill arrested Open Kingdom Market darknet marketplace dismantled; administrator Alan Bill arrested at the publisher, Slovakian Administrator of Darknet Market that Sold Drugs and Stolen Personal Information Sentenced to 200 Months in Prison Open Slovakian Administrator of Darknet Market that Sold Drugs and Stolen Personal Information Sentenced to 200 Months in Prison at the publisher, Slovakian Man Admits Aiding Darknet Market that Sold Drugs and Stolen Personal Information Open Slovakian Man Admits Aiding Darknet Market that Sold Drugs and Stolen Personal Information at the publisher
Dridex/Bugat/Cridex disruption
Reported convicted count

Was: Not recorded

Now: 1

Andrey Ghinkul pleaded guilty to two counts.
Dridex botnet disrupted; administrator Andrey Ghinkul charged Open Dridex botnet disrupted; administrator Andrey Ghinkul charged at the publisher, Moldovan Pleads Guilty to Distributing Bugat Malware Open Moldovan Pleads Guilty to Distributing Bugat Malware at the publisher, Moldovan Sentenced for Distributing Multifunction Malware Package Open Moldovan Sentenced for Distributing Multifunction Malware Package at the publisher
Dridex/Bugat/Cridex disruption
What happened afterward

Was: Not recorded

Now: Andrey Ghinkul was extradited from Cyprus to the United States in February 2016, pleaded guilty on 2017-02-08, and was sentenced on 2018-12-06 to time served.

Verified final case outcome.
Dridex botnet disrupted; administrator Andrey Ghinkul charged Open Dridex botnet disrupted; administrator Andrey Ghinkul charged at the publisher, Moldovan Pleads Guilty to Distributing Bugat Malware Open Moldovan Pleads Guilty to Distributing Bugat Malware at the publisher, Moldovan Sentenced for Distributing Multifunction Malware Package Open Moldovan Sentenced for Distributing Multifunction Malware Package at the publisher
Samourai Wallet seizure
Reported convicted count

Was: Not recorded

Now: 2

Both founders pleaded guilty on 2025-07-30.
Founders of Samourai Wallet Cryptocurrency Mixing Service Plead Guilty Open Founders of Samourai Wallet Cryptocurrency Mixing Service Plead Guilty at the publisher, Founders of Samourai Wallet Cryptocurrency Mixing Service Sentenced to Five and Four Years in Prison Open Founders of Samourai Wallet Cryptocurrency Mixing Service Sentenced to Five and Four Years in Prison at the publisher, Samourai Wallet founders arrested; infrastructure seized Open Samourai Wallet founders arrested; infrastructure seized at the publisher
Samourai Wallet seizure
What happened afterward

Was: Not recorded

Now: Keonne Rodriguez and William Lonergan Hill pleaded guilty on 2025-07-30. Rodriguez was sentenced on 2025-11-06 to five years; Hill was sentenced on 2025-11-19 to four years. Each also received three years of supervised release and a USD 250,000 fine.

Verified final case outcomes.
Founders of Samourai Wallet Cryptocurrency Mixing Service Plead Guilty Open Founders of Samourai Wallet Cryptocurrency Mixing Service Plead Guilty at the publisher, Founders of Samourai Wallet Cryptocurrency Mixing Service Sentenced to Five and Four Years in Prison Open Founders of Samourai Wallet Cryptocurrency Mixing Service Sentenced to Five and Four Years in Prison at the publisher, Samourai Wallet founders arrested; infrastructure seized Open Samourai Wallet founders arrested; infrastructure seized at the publisher
Operation Cronos wave 1
What happened afterward

Was: LockBit relaunched on new infrastructure within days; further charges and sanctions followed in May 2024.

Now: LockBit relaunched after the February 2024 disruption. Mikhail Vasiliev and Ruslan Astamirov pleaded guilty on 2024-07-18 and were still awaiting sentencing in the latest located official update. Rostislav Panev was arrested in Israel in August 2024, extradited on 2025-03-13, and detained pending trial. Artur Sungatov, Ivan Kondratyev, Mikhail Matveev and Dmitry Khoroshev remained at large in the latest located official update.

Updated individual case statuses.
Dual Russian and Israeli National Extradited to the United States for His Role in the LockBit Ransomware Conspiracy Open Dual Russian and Israeli National Extradited to the United States for His Role in the LockBit Ransomware Conspiracy at the publisher, Two Foreign Nationals Plead Guilty to Participation in LockBit Ransomware Group Open Two Foreign Nationals Plead Guilty to Participation in LockBit Ransomware Group at the publisher
Operation Trojan Shield
Reported apprehended count

Was: 800

Now: 1200

The 2025 DOJ case update reports approximately 1,200 arrests over the investigation, superseding the initial 800-plus figure.
All Extradited Distributors of ANOM Hardened Encrypted Devices Plead Guilty to Racketeering Conspiracy Open All Extradited Distributors of ANOM Hardened Encrypted Devices Plead Guilty to Racketeering Conspiracy at the publisher
Operation Trojan Shield
Reported convicted count

Was: Not recorded

Now: 8

All eight defendants extradited to the United States as of 2025-02-07 had pleaded guilty.
All Extradited Distributors of ANOM Hardened Encrypted Devices Plead Guilty to Racketeering Conspiracy Open All Extradited Distributors of ANOM Hardened Encrypted Devices Plead Guilty to Racketeering Conspiracy at the publisher
Operation Trojan Shield
Reported fugitive count

Was: Not recorded

Now: 1

DOJ states one of the 17 San Diego defendants remained a fugitive; eight others were arrested abroad but not yet extradited.
All Extradited Distributors of ANOM Hardened Encrypted Devices Plead Guilty to Racketeering Conspiracy Open All Extradited Distributors of ANOM Hardened Encrypted Devices Plead Guilty to Racketeering Conspiracy at the publisher
Operation Trojan Shield
What happened afterward

Was: 17 defendants indicted in the Southern District of California; multiple extraditions and guilty pleas through 2024 and 2025.

Now: Seventeen distributors were indicted in the Southern District of California. By 2025-02-07, all eight defendants extradited to the United States had pleaded guilty; eight additional defendants had been arrested abroad but not extradited, and one remained a fugitive. The broader operation produced approximately 1,200 arrests worldwide.

Current official prosecution status.
All Extradited Distributors of ANOM Hardened Encrypted Devices Plead Guilty to Racketeering Conspiracy Open All Extradited Distributors of ANOM Hardened Encrypted Devices Plead Guilty to Racketeering Conspiracy at the publisher
Megaupload seizure
What happened afterward

Was: Not recorded

Now: The United States prosecution remains pending as to Kim Dotcom. New Zealand’s High Court rejected his judicial-review challenge in [2025] NZHC 2634, and the Court of Appeal dismissed his appeal on 2026-07-01 in [2026] NZCA 284; a potential Supreme Court route remained. Co-defendant Andrus Nomm pleaded guilty in 2015; Mathias Ortmann and Bram van der Kolk entered New Zealand guilty pleas and were sentenced there.

Updated extradition and co-defendant status; not all foreign proceedings are normalized as U.S. convictions.
Dotcom v Minister of Justice [2025] NZHC 2634 Open Dotcom v Minister of Justice [2025] NZHC 2634 at the publisher, Dotcom v Minister of Justice [2026] NZCA 284 Open Dotcom v Minister of Justice [2026] NZCA 284 at the publisher, Megaupload indictment and seizure announcement Open Megaupload indictment and seizure announcement at the publisher
Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption
Reported charged count

Was: Not recorded

Now: 1

Jacob Butler was charged April 10, 2026 in connection with KimWolf.
Canadian Man Arrested by International Authorities, Charged with Administrating KimWolf DDoS Botnet Open Canadian Man Arrested by International Authorities, Charged with Administrating KimWolf DDoS Botnet at the publisher, Coordinated disruption of Aisuru, KimWolf, JackSkid, and Mossad IoT DDoS botnets Open Coordinated disruption of Aisuru, KimWolf, JackSkid, and Mossad IoT DDoS botnets at the publisher
Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption
Reported apprehended count

Was: Not recorded

Now: 1

Butler was arrested in Ottawa on May 20, 2026 under an extradition warrant.
Canadian Man Arrested by International Authorities, Charged with Administrating KimWolf DDoS Botnet Open Canadian Man Arrested by International Authorities, Charged with Administrating KimWolf DDoS Botnet at the publisher, Coordinated disruption of Aisuru, KimWolf, JackSkid, and Mossad IoT DDoS botnets Open Coordinated disruption of Aisuru, KimWolf, JackSkid, and Mossad IoT DDoS botnets at the publisher
Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption
What happened afterward

Was: Not recorded

Now: Jacob Butler, alleged administrator of the KimWolf component, was charged in the District of Alaska on 2026-04-10 and arrested in Canada on 2026-05-20 pursuant to an extradition warrant. The complaint was unsealed May 21; extradition/prosecution remained pending at the cutoff.

New person/case development after the infrastructure action.
Canadian Man Arrested by International Authorities, Charged with Administrating KimWolf DDoS Botnet Open Canadian Man Arrested by International Authorities, Charged with Administrating KimWolf DDoS Botnet at the publisher, Coordinated disruption of Aisuru, KimWolf, JackSkid, and Mossad IoT DDoS botnets Open Coordinated disruption of Aisuru, KimWolf, JackSkid, and Mossad IoT DDoS botnets at the publisher
Backpage.com seizure
Reported convicted count

Was: Not recorded

Now: 5

Lacey, Spear and Brunst were convicted at trial; Ferrer and Hyer pleaded guilty. Larkin died before trial.
Backpage Principals Convicted of $500M Prostitution Promotion Scheme Open Backpage Principals Convicted of $500M Prostitution Promotion Scheme at the publisher, Justice Department leads seizure of Backpage.com, indicts founders Open Justice Department leads seizure of Backpage.com, indicts founders at the publisher, Three Owners of Notorious Prostitution Website Backpage Sentenced Open Three Owners of Notorious Prostitution Website Backpage Sentenced at the publisher, United States v. Backpage case information and docket updates Open United States v. Backpage case information and docket updates at the publisher
Backpage.com seizure
What happened afterward

Was: Not recorded

Now: Michael Lacey was sentenced to 60 months, Scott Spear to 120 months, and John “Jed” Brunst to 120 months on 2024-08-28. Carl Ferrer and Dan Hyer had pleaded guilty; Hyer was later sentenced to time served in September 2025. James Larkin died before trial. Appeals and forfeiture proceedings continued.

Updated individual outcomes and docket status.
Backpage Principals Convicted of $500M Prostitution Promotion Scheme Open Backpage Principals Convicted of $500M Prostitution Promotion Scheme at the publisher, Justice Department leads seizure of Backpage.com, indicts founders Open Justice Department leads seizure of Backpage.com, indicts founders at the publisher, Three Owners of Notorious Prostitution Website Backpage Sentenced Open Three Owners of Notorious Prostitution Website Backpage Sentenced at the publisher, United States v. Backpage case information and docket updates Open United States v. Backpage case information and docket updates at the publisher
3ve ad-fraud botnet disruption
Reported apprehended count

Was: Not recorded

Now: 3

DOJ reported three defendants arrested at the November 2018 announcement; eight were charged.
Nine charged in $36 million digital advertising fraud scheme (3ve/Methbot)Open Nine charged in $36 million digital advertising fraud scheme (3ve/Methbot) at the publisher
BestMixer seizure
What came down

Was: Servers seized in the Netherlands, Luxembourg, and elsewhere; domain taken offline.

Now: Six servers were seized in the Netherlands and Luxembourg and BestMixer.io was taken offline.

Official Europol figure replaces the generic description.
BestMixer.io taken down in first action of its kind against crypto mixing service Open BestMixer.io taken down in first action of its kind against crypto mixing service at the publisher
PowerOFF eight-domain action (April 2026, USAO Alaska wave)
Record kind

Was: incident

Now: incident_component

Reclassified to prevent double-counting the overlapping U.S. component and global April 2026 wave.
Europol statement on the April 2026 Operation PowerOFF wave Open Europol statement on the April 2026 Operation PowerOFF wave at the publisher, PowerOFF: eight DDoS-for-hire domains seized Open PowerOFF: eight DDoS-for-hire domains seized at the publisher

Showing 101 to 138 of 138 corrections