Operation Cronos
Organizations and roles
Last reviewed August 21, 2026
The public record puts 8 organizations on this action. Operational lead: NCA and FBI. The table lists the role the cited record assigns each one, in the record's own wording where it gives any.
Why this page names organizations only
Roles on this page describe the agencies that took part. Individuals named in the public record appear on the takedown entry itself, under People and accountability.
Organizations and roles
| Emblem | Organization | Role | What the record says |
|---|---|---|---|
| National Crime Agency United Kingdom , United Kingdom | Operational lead | Led the international task force and the infiltration and seizure of LockBit's administration environment. | |
| Federal Bureau of Investigation United States , United States | Co-lead | Co-led the task force and the US investigative component. | |
| European Union Agency for Law Enforcement Cooperation | Coordinator | Coordinated the ten-country operation and provided analytical support. | |
| United States Attorney's Office for the District of New Jersey United States , United States | Charging | Filed the indictments against Khoroshev, Sungatov, Kondratyev, and others. | |
| European Union Agency for Criminal Justice Cooperation | Judicial cooperation | Coordinated judicial cooperation. | |
| National Police Agency of Japan Japan , Japan | Technical partner | Contributed to the development of decryption capability. | |
| Australian Federal Police Australia , Australia | Supporting | Participated in the task force. | |
| Gendarmerie nationale France , France | Supporting | Participated in the task force. |
Accountability
Legal authority
UK judicial process; US seizure warrants and indictments (District of New Jersey); Europol and Eurojust coordination; European Arrest Warrants
Oversight
The record assigns prosecuting or judicial roles to Eurojust.
Ongoing investigation
Group accounted for: Members remain at large. The core administrator Khoroshev was identified and charged but remains at large in Russia, as do at least two charged affiliates. The service relaunched within days, explicitly demonstrating remaining members.
This page records organizational involvement as the cited sources state it. Where a role carries no description, the record gives none.
Last reviewed August 21, 2026