Roman Berezhnoy
No alias recorded
Indicted, Arrested
Public record reviewed to August 23, 2026
Index entry last updated August 23, 2026
Alleged operator of the 8Base / Affiliate 2803 Phobos ransomware affiliate group.
Every charge in this entry is an allegation. No conviction is recorded.
Everything on this page comes from cited public sources.
This entry records 2 actions across 1 takedown, each traced to a cited source. At least one linked takedown was added in the extended pass and was not independently source verified. Where the record is silent, this page says so rather than filling the gap.
Legal summary
- Associated takedowns
- Phobos/8Base ransomware disruption
- Recorded role
- Operator of the 8Base / Affiliate 2803 Phobos ransomware affiliate group
- Group segment
- Affiliate
- Charging authority
- United States Department of Justice
- Charging jurisdiction
- Not recorded
- Case number
- 8:23-cr-00459
- Latest recorded action
- Arrested, February 2025
- Nationality
- Russia
- Country of residence
- Not established
Sources
Every claim on this person's pages traces to one of the entries below.
Official announcements come first, then the reporting that supports individual details.
1 source cited across 2 recorded actions
-
[1]
Phobos Ransomware Affiliates Arrested in Coordinated International DisruptionOpen source
US charges against Roman Berezhnoy and Egor Nikolaevich Glebov, the 8Base / 'Affiliate 2803' affiliate organization, 1,000+ victims and over $16 million in ransom payments, and the arrests accompanying the international disruption