[Back to Radar/Dispossessor ransomware disruption](https://takedownindex.org/takedowns/radar-dispossessor-ransomware-disruption)

# Organizations and roles

August 2024, Ransomware
[Radar/Dispossessor ransomware disruption](https://takedownindex.org/takedowns/radar-dispossessor-ransomware-disruption)

Last reviewed August 21, 2026

The public record puts 3 organizations on this action. Operational lead: FBI. The table lists the role the cited record assigns each one, in the record's own wording where it gives any.

## Why this page names organizations only

Roles on this page describe the agencies that took part. Individuals named in the public record appear on the takedown entry itself, under People and accountability.

## Organizations and roles

| Emblem | Organization | Role | What the record says |
| --- | --- | --- | --- |
| | [Federal Bureau of Investigation](https://takedownindex.org/organizations/federal-bureau-of-investigation), United States | Operational lead | Led the investigation and technical action. |
| | [Bundeskriminalamt](https://takedownindex.org/organizations/bundeskriminalamt), Germany | Supporting | Supported the German component of the disruption. |
| | [National Crime Agency](https://takedownindex.org/organizations/national-crime-agency), United Kingdom | Supporting | Supported the UK component of the disruption. |

## Accountability

### Legal authority

Federal seizure warrant; coordinated UK/German judicial authority.

### Ongoing investigation

Group accounted for: Members remain at large. The alleged operator, known only by the alias 'Brain,' was identified as believed to be in Europe; no arrest was announced.

This page records organizational involvement as the cited sources state it. Where a role carries no description, the record gives none.

Last reviewed August 21, 2026