# Egor Nikolaevich Glebov

No alias recorded

Indicted, Arrested

Public record reviewed to August 23, 2026

Index entry last updated August 23, 2026

_Alleged_ operator of the 8Base / Affiliate 2803 Phobos ransomware affiliate group.

Every charge in this entry is an allegation. No conviction is recorded.

Everything on this page comes from cited public sources.

This entry records 2 actions across 1 takedown, each traced to a cited source. At least one linked takedown was added in the extended pass and was not independently source verified. Where the record is silent, this page says so rather than filling the gap.

Legal summary

**Associated takedowns:** [Phobos/8Base ransomware disruption](https://takedownindex.org/takedowns/phobos-8base-ransomware-disruption)

**Recorded role:** Operator of the 8Base / Affiliate 2803 Phobos ransomware affiliate group

**Group segment:** Affiliate

**Charging authority:** United States Department of Justice

**Charging jurisdiction:** Not recorded

**Case number:** 8:23-cr-00459

**Latest recorded action:** Arrested, February 2025

**Nationality:** Russia

**Country of residence:** Not established

- [Associated takedowns](https://takedownindex.org/people/egor-nikolaevich-glebov)
- [Legal history](https://takedownindex.org/people/egor-nikolaevich-glebov/legal-history)
- [Charges](https://takedownindex.org/people/egor-nikolaevich-glebov/charges)
- [Sources](https://takedownindex.org/people/egor-nikolaevich-glebov/sources)

## Sources

Every claim on this person's pages traces to one of the entries below.

Official announcements come first, then the reporting that supports individual details.

1 source cited across 2 recorded actions

1. [1]
[Phobos Ransomware Affiliates Arrested in Coordinated International Disruption](https://takedownindex.org/sources/united-states-department-of-justice-phobos-ransomware-affiliates-arrested-in-coo)

United States Department of Justice, February 10, 2025 Government release Source grade P1

US charges against Roman Berezhnoy and Egor Nikolaevich Glebov, the 8Base / 'Affiliate 2803' affiliate organization, 1,000+ victims and over $16 million in ransom payments, and the arrests accompanying the international disruption

[Open source](https://www.justice.gov/opa/pr/phobos-ransomware-affiliates-arrested-coordinated-international-disruption)

Coverage note. Nothing on this page rests on an uncited claim. Where a source is silent on an outcome, this entry leaves the outcome unstated rather than inferring one. At least one linked takedown was added in the extended pass and was not independently source verified.
