Government release

# United States Charges Dual Russian and Israeli National as Developer of LockBit Ransomware Group

United States Department of Justice, Office of Public Affairs, December 20, 2024. Both Rostislav Panev person\_actions on td\_2024\_cronos\_w1: that a superseding criminal complaint filed in the District of New Jersey was unsealed on 20 December 2024 charging Panev, 51, a dual Russian and Israeli national, as a developer of the LockBit ransomware group (pa\_panev\_charged); and that he had been arrested in Israel in August pursuant to a U.S. provisional arrest request with a view to extradition, and was in custody in Israel pending extradition at the time of the release (pa\_panev\_arrest)..

**Source type:** Government release

**Published:** December 20, 2024

**Research grade:** P1

**Used in entries:** 2

## Bibliographic record

**Publisher:** United States Department of Justice, Office of Public Affairs

**Published:** December 20, 2024

**Source type:** Government release

**Research grade:** Source grade P1

**Language:** English

**Official record:** Official publication

**Address:** [https://www.justice.gov/archives/opa/pr/united-states-charges-dual-russian-and-israeli-national-developer-lockbit-ransomware-group](https://www.justice.gov/archives/opa/pr/united-states-charges-dual-russian-and-israeli-national-developer-lockbit-ransomware-group)

**What it supports:** Both Rostislav Panev person\_actions on td\_2024\_cronos\_w1: that a superseding criminal complaint filed in the District of New Jersey was unsealed on 20 December 2024 charging Panev, 51, a dual Russian and Israeli national, as a developer of the LockBit ransomware group (pa\_panev\_charged); and that he had been arrested in Israel in August pursuant to a U.S. provisional arrest request with a view to extradition, and was in custody in Israel pending extradition at the time of the release (pa\_panev\_arrest).

**Dataset id:** src\_doj\_panev\_charged\_2024

## Research notes

- /opa/pr/ URLs of this age now resolve under /archives/opa/pr/; the DOJ press-release API returns this archives path as the canonical url, and the cited URL matches it exactly.
- The release does not give the filing dates of the original or superseding complaints that the citing record's continuity note asserts (2024-08-09 and 2024-09-25). It states only that the superseding complaint was unsealed 'today', 20 December 2024, and that the arrest was 'in August'. It links to a copy of the superseding criminal complaint.

How this source is used

Cited 2 times across 1 record type.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Legal actions against people

2 citations

Cited for a recorded legal action against a named person.

-
[Rostislav Panev](https://takedownindex.org/people/rostislav-panev)

Arrested, Operation Cronos wave 1

Primary source
-
[Rostislav Panev](https://takedownindex.org/people/rostislav-panev)

Charged, Operation Cronos wave 1

Primary source

[All sources](https://takedownindex.org/sources)
