Skip to main content
Back to ALPHV/BlackCat disruption

Organizations and roles

December 2023, Ransomware
ALPHV/BlackCat disruption

Last reviewed August 21, 2026

The public record puts 2 organizations on this action. Operational lead: FBI. The table lists the role the cited record assigns each one, in the record's own wording where it gives any.

Why this page names organizations only

Roles on this page describe the agencies that took part. Individuals named in the public record appear on the takedown entry itself, under People and accountability.

Organizations and roles

Emblem Organization Role What the record says
Federal Bureau of Investigation United States , United States Operational lead Led the technical operation.
United States Department of Justice United States , United States Prosecuting Directed the federal legal process.

Accountability

Legal authority

Court-authorized technical operation; federal criminal process.

Oversight

The record assigns prosecuting or judicial roles to DOJ.

Ongoing investigation

Group accounted for: Partial. No core-operator arrests were announced in the initial disruption; the group reasserted control of some infrastructure shortly afterward.

This page records organizational involvement as the cited sources state it. Where a role carries no description, the record gives none.

Last reviewed August 21, 2026