# People The Internet Takedown Index records the people publicly named in the takedowns it documents: defendants, alleged operators, administrators, developers, affiliates, and facilitators. 49 named people across 27 takedowns A person's presence in this database does not imply guilt. Status language follows the public record and keeps allegations, charges, arrests, convictions, and sentences apart. | [Person](https://takedownindex.org/people?sort=name) | Role | Takedown | Status | Jurisdiction | [Latest action](https://takedownindex.org/people?sort=recent) | | --- | --- | --- | --- | --- | --- | | [Alan Bill](https://takedownindex.org/people/alan-bill), No alias recorded | Alleged administrator of Kingdom Market | [Kingdom Market seizure](https://takedownindex.org/takedowns/kingdom-market-seizure) | Arrested, Charged | United States | Dec 2023 | | [Aleksandr Stepanov](https://takedownindex.org/people/aleksandr-stepanov), Also known as: JimmBee | Lead defendant, DanaBot malware scheme | [Operation Endgame wave 2](https://takedownindex.org/takedowns/operation-endgame-wave-2) | Charged | Russia | May 2025 | | [Alexander Dmitrienko](https://takedownindex.org/people/alexander-dmitrienko), No alias recorded | Distributor of ANOM hardened encrypted devices | [Operation Trojan Shield](https://takedownindex.org/takedowns/operation-trojan-shield) | Charged | Jurisdiction not recorded | Jun 2021 | | [Alexander Vinnik](https://takedownindex.org/people/alexander-vinnik), No alias recorded | Operator of BTC-e | [BTC-e disruption](https://takedownindex.org/takedowns/btc-e-disruption) | Arrested, Convicted | Greece / United States | Jul 2017 | | [Alexandre Cazes](https://takedownindex.org/people/alexandre-cazes), Also known as: Alpha02, Admin | Founder and administrator of AlphaBay | [AlphaBay seizure](https://takedownindex.org/takedowns/alphabay-seizure) | Charged, Arrested, Deceased | United States / Thailand | Jul 2017 | | [Anatoly Legkodymov](https://takedownindex.org/people/anatoly-legkodymov), No alias recorded | Founder of Bitzlato | [Bitzlato / Operation Cryptostorm](https://takedownindex.org/takedowns/bitzlato-operation-cryptostorm) | Charged, Arrested, Pleaded guilty | United States | Jan 2023 | | [Andrey Ghinkul](https://takedownindex.org/people/andrey-ghinkul), No alias recorded | Alleged administrator of Dridex | [Dridex/Bugat/Cridex disruption](https://takedownindex.org/takedowns/dridex-bugat-cridex-disruption) | Arrested, Charged | Cyprus | Oct 2015 | | [Anton Napolsky](https://takedownindex.org/people/anton-napolsky), No alias recorded | Alleged operator of Z-Library | [Z-Library domain seizure](https://takedownindex.org/takedowns/z-library-domain-seizure) | Charged, Arrested | Argentina | Nov 2022 | | [Artem Aleksandrovich Kalinkin](https://takedownindex.org/people/artem-aleksandrovich-kalinkin), Also known as: Onix | Lead defendant, DanaBot malware scheme | [Operation Endgame wave 2](https://takedownindex.org/takedowns/operation-endgame-wave-2) | Charged | Russia | May 2025 | | [Artem Vaulin](https://takedownindex.org/people/artem-vaulin), No alias recorded | Administrator of Kickass Torrents | [Kickass Torrents takedown](https://takedownindex.org/takedowns/kickass-torrents-takedown) | Arrested | Poland | Jul 2016 | | [Artur Sungatov](https://takedownindex.org/people/artur-sungatov), No alias recorded | LockBit affiliate | [Operation Cronos wave 1](https://takedownindex.org/takedowns/operation-cronos-wave-1) | Charged, Publicly wanted | United States / Russia | Feb 2024 | | [Aurangzeb Ayub](https://takedownindex.org/people/aurangzeb-ayub), No alias recorded | Distributor of ANOM hardened encrypted devices | [Operation Trojan Shield](https://takedownindex.org/takedowns/operation-trojan-shield) | Charged | Jurisdiction not recorded | Jun 2021 | | [Blake Benthall](https://takedownindex.org/people/blake-benthall), Also known as: Defcon | Alleged operator of Silk Road 2.0 | [Operation Onymous](https://takedownindex.org/takedowns/operation-onymous) | Arrested, Charged | United States | Nov 2014 | | [Bram van der Kolk](https://takedownindex.org/people/bram-van-der-kolk), No alias recorded | Megaupload executive | [Megaupload seizure](https://takedownindex.org/takedowns/megaupload-seizure) | Arrested | New Zealand | Jan 2012 | | [Carl Ferrer](https://takedownindex.org/people/carl-ferrer), No alias recorded | CEO of Backpage.com | [Backpage.com seizure](https://takedownindex.org/takedowns/backpage-com-seizure) | Charged, Pleaded guilty | United States | Apr 2018 | | [Conor Brian Fitzpatrick](https://takedownindex.org/people/conor-brian-fitzpatrick), Also known as: pompompurin | Founder and administrator of BreachForums | [BreachForums shutdown following administrator arrest](https://takedownindex.org/takedowns/breachforums-shutdown-following-administrator-arrest) | Arrested, Charged, Pleaded guilty, Sentenced | United States | Sep 2025 | | [Diogo Santos Coelho](https://takedownindex.org/people/diogo-santos-coelho), Also known as: Omnipotent, downloading, shiza, kingphish3r | Founder and chief administrator of RaidForums | [Operation Tourniquet](https://takedownindex.org/takedowns/operation-tourniquet) | Arrested, Charged, Extradition requested | United Kingdom / United States | Jan 2022 | | [Dmitry Olegovich Pavlov](https://takedownindex.org/people/dmitry-olegovich-pavlov), No alias recorded | Operated and administered the servers that ran Hydra Market | [Hydra Market server seizure](https://takedownindex.org/takedowns/hydra-market-server-seizure) | Charged, Publicly wanted | United States / Russia | Apr 2022 | | [Dmitry Yuryevich Khoroshev](https://takedownindex.org/people/dmitry-yuryevich-khoroshev), Also known as: LockBitSupp, LockBit, putinkrab | Creator, developer, and administrator of LockBit, operating as LockBitSupp | [Operation Cronos wave 1](https://takedownindex.org/takedowns/operation-cronos-wave-1) | Charged, Publicly wanted, Sanctioned | United States / Russia | May 2024 | | [Domenico Catanzariti](https://takedownindex.org/people/domenico-catanzariti), No alias recorded | Distributor of ANOM hardened encrypted devices | [Operation Trojan Shield](https://takedownindex.org/takedowns/operation-trojan-shield) | Charged | Jurisdiction not recorded | Jun 2021 | | [Dragan Nikitovic](https://takedownindex.org/people/dragan-nikitovic), No alias recorded | Distributor of ANOM hardened encrypted devices | [Operation Trojan Shield](https://takedownindex.org/takedowns/operation-trojan-shield) | Charged | Jurisdiction not recorded | Jun 2021 | | [Edwin Harmendra Kumar](https://takedownindex.org/people/edwin-harmendra-kumar), No alias recorded | Distributor of ANOM hardened encrypted devices | [Operation Trojan Shield](https://takedownindex.org/takedowns/operation-trojan-shield) | Charged | Jurisdiction not recorded | Jun 2021 | | [Evgeniy Mikhailovich Bogachev](https://takedownindex.org/people/evgeniy-mikhailovich-bogachev), Also known as: Slavik, lucky12345, Pollingsoon | Administrator of the Gameover Zeus botnet | [Operation Tovar](https://takedownindex.org/takedowns/operation-tovar) | Charged, Publicly wanted | United States / Russia | Jun 2014 | | [Finn Batato](https://takedownindex.org/people/finn-batato), No alias recorded | Megaupload executive | [Megaupload seizure](https://takedownindex.org/takedowns/megaupload-seizure) | Arrested | New Zealand | Jan 2012 | | [Ivan Gennadievich Kondratyev](https://takedownindex.org/people/ivan-gennadievich-kondratyev), Also known as: Bassterlord, Fisheye | LockBit affiliate operating as Bassterlord | [Operation Cronos wave 1](https://takedownindex.org/takedowns/operation-cronos-wave-1) | Charged, Publicly wanted | United States / Russia | Feb 2024 | Showing 1 to 25 of 49 people Not everyone in a takedown is named Authorities often report a number of arrests without publishing names. Those counts stay on the takedown record, so this list is smaller than the reported arrest totals. * * * A role is an allegation until a court says otherwise The role column repeats the role stated in the public record. Where no conviction is recorded, it remains an accusation and nothing more. * * * Reviewed to August 20, 2026 Where a case left the public record before it concluded, the last recorded action is the last one published. A missing outcome is not an outcome.