People
The Internet Takedown Index records the people publicly named in the takedowns it documents: defendants, alleged operators, administrators, developers, affiliates, and facilitators.
49 named people across 27 takedowns
A person's presence in this database does not imply guilt. Status language follows the public record and keeps allegations, charges, arrests, convictions, and sentences apart.
| Person | Role | Takedown | Status | Jurisdiction | Latest action |
|---|---|---|---|---|---|
| Alan Bill , No alias recorded | Alleged administrator of Kingdom Market | Kingdom Market seizure | Arrested, Charged | United States | Dec 2023 |
| Aleksandr Stepanov , Also known as: JimmBee | Lead defendant, DanaBot malware scheme | Operation Endgame wave 2 | Charged | Russia | May 2025 |
| Alexander Dmitrienko , No alias recorded | Distributor of ANOM hardened encrypted devices | Operation Trojan Shield | Charged | Jurisdiction not recorded | Jun 2021 |
| Alexandre Cazes , Also known as: Alpha02, Admin | Founder and administrator of AlphaBay | AlphaBay seizure | Charged, Arrested, Deceased | United States / Thailand | Jul 2017 |
| Anatoly Legkodymov , No alias recorded | Founder of Bitzlato | Bitzlato / Operation Cryptostorm | Charged, Arrested, Pleaded guilty | United States | Jan 2023 |
| Andrey Ghinkul , No alias recorded | Alleged administrator of Dridex | Dridex/Bugat/Cridex disruption | Arrested, Charged | Cyprus | Oct 2015 |
| Anton Napolsky , No alias recorded | Alleged operator of Z-Library | Z-Library domain seizure | Charged, Arrested | Argentina | Nov 2022 |
| Artem Aleksandrovich Kalinkin , Also known as: Onix | Lead defendant, DanaBot malware scheme | Operation Endgame wave 2 | Charged | Russia | May 2025 |
| Artur Sungatov , No alias recorded | LockBit affiliate | Operation Cronos wave 1 | Charged, Publicly wanted | United States / Russia | Feb 2024 |
| Aurangzeb Ayub , No alias recorded | Distributor of ANOM hardened encrypted devices | Operation Trojan Shield | Charged | Jurisdiction not recorded | Jun 2021 |
| Blake Benthall , Also known as: Defcon | Alleged operator of Silk Road 2.0 | Operation Onymous | Arrested, Charged | United States | Nov 2014 |
| Carl Ferrer , No alias recorded | CEO of Backpage.com | Backpage.com seizure | Charged, Pleaded guilty | United States | Apr 2018 |
| Conor Brian Fitzpatrick , Also known as: pompompurin | Founder and administrator of BreachForums | BreachForums shutdown following administrator arrest | Arrested, Charged, Pleaded guilty, Sentenced | United States | Sep 2025 |
| Diogo Santos Coelho , Also known as: Omnipotent, downloading, shiza, kingphish3r | Founder and chief administrator of RaidForums | Operation Tourniquet | Arrested, Charged, Extradition requested | United Kingdom / United States | Jan 2022 |
| Dmitry Olegovich Pavlov , No alias recorded | Operated and administered the servers that ran Hydra Market | Hydra Market server seizure | Charged, Publicly wanted | United States / Russia | Apr 2022 |
| Dmitry Yuryevich Khoroshev , Also known as: LockBitSupp, LockBit, putinkrab | Creator, developer, and administrator of LockBit, operating as LockBitSupp | Operation Cronos wave 1 | Charged, Publicly wanted, Sanctioned | United States / Russia | May 2024 |
| Domenico Catanzariti , No alias recorded | Distributor of ANOM hardened encrypted devices | Operation Trojan Shield | Charged | Jurisdiction not recorded | Jun 2021 |
| Dragan Nikitovic , No alias recorded | Distributor of ANOM hardened encrypted devices | Operation Trojan Shield | Charged | Jurisdiction not recorded | Jun 2021 |
| Edwin Harmendra Kumar , No alias recorded | Distributor of ANOM hardened encrypted devices | Operation Trojan Shield | Charged | Jurisdiction not recorded | Jun 2021 |
| Evgeniy Mikhailovich Bogachev , Also known as: Slavik, lucky12345, Pollingsoon | Administrator of the Gameover Zeus botnet | Operation Tovar | Charged, Publicly wanted | United States / Russia | Jun 2014 |
| Ivan Gennadievich Kondratyev , Also known as: Bassterlord, Fisheye | LockBit affiliate operating as Bassterlord | Operation Cronos wave 1 | Charged, Publicly wanted | United States / Russia | Feb 2024 |
| Joseph Hakan Ayik , No alias recorded | Distributor of ANOM hardened encrypted devices | Operation Trojan Shield | Charged | Australia | Jun 2021 |
| Kim Dotcom , Also known as: Kim Schmitz | Founder and controlling figure of Megaupload | Megaupload seizure | Charged, Arrested | United States / New Zealand | Jan 2012 |
| Maxim Rudometov , No alias recorded | Alleged developer/administrator of RedLine Stealer | Operation Magnus (RedLine and META infostealers) | Charged | Russia | Oct 2024 |
| Michael Lacey , No alias recorded | Co-founder of Backpage.com | Backpage.com seizure | Charged | United States | Apr 2018 |
Showing 1 to 25 of 36 people
Not everyone in a takedown is named
Authorities often report a number of arrests without publishing names. Those counts stay on the takedown record, so this list is smaller than the reported arrest totals.
A role is an allegation until a court says otherwise
The role column repeats the role stated in the public record. Where no conviction is recorded, it remains an accusation and nothing more.
Reviewed to August 20, 2026
Where a case left the public record before it concluded, the last recorded action is the last one published. A missing outcome is not an outcome.