Ransomware · 3h ago
The Record reports that Karen Vardanyan, an alleged core Ryuk operator extradited from Ukraine, was sentenced to 24 months in federal prison and ordered to pay $1.22 million in restitution after pleading guilty to conspiracy and computer fraud. BleepingComputer independently reports the same two-year term.
The case is an enforcement result, not a new intrusion wave. Prosecutors tied Vardanyan to widespread Ryuk extortion, including attacks that encrypted victims' systems and disrupted operations; the reporting does not describe any new technique or infrastructure change.
For healthcare and local government targets, the practical exposure is unchanged: Ryuk-style incidents remain extortion events that can stop services and force recovery work, while this sentencing mainly shows that operators can be reached across borders after the fact.
4 sources covering this story
US Court Sentences Armenian Man to Prison for Ryuk Ransomware Attacks
Karen Vardanyan has also been ordered to pay over $1.2 million in restitution to victims.
Ryuk ransomware operator sentenced to 2 years in prison
The Armenian national was extradited from Ukraine to the United States last year and pleaded guilty to cybercrimes in July.
The Record from Recorded Future
Ryuk ransomware operator gets 2-year sentence after extorting victims for $1.2 million
An Armenian national and member of the Ryuk ransomware gang was sentenced to two years in federal prison for his role in launching attacks.
Ryuk ransomware member sentenced to 24 months in prison
companies and encrypting their systems in Ryuk ransomware attacks.
Part of the PlainSec briefing for 2026-09-24