Two Americans Sentenced to Four Years for BlackCat Ransomware Attacks

On April 30, 2026, the U.S. Department of Justice sentenced two American cybersecurity professionals to four years each in prison for their roles in a conspiracy involving ALPHV BlackCat ransomware attacks that targeted multiple U.S. victims in 2023, per the DOJ press release.

The attacks impacted multiple U.S. entities, with the defendants using ransomware to obstruct, delay, or affect commerce through extortion, according to the DOJ press release. The bundle specifies that the professionals attacked several victims, though it does not detail the exact number or identities.

Ransomware operations like ALPHV BlackCat typically encrypt data and demand payments, disrupting business operations across sectors such as healthcare and finance, based on standard knowledge of such cyber threats. The press release notes the attacks occurred in 2023, suggesting a scope that could involve dozens of entities given the group's known activity patterns reported in public cybersecurity records.

Prior to sentencing, the defendants faced charges for conspiracy to commit extortion under federal statutes related to interstate commerce interference. The new state imposes four-year prison terms on each individual, effective from the sentencing date of April 30, 2026, per the DOJ press release.

This shifts their status from accused to convicted, initiating incarceration without specified parole details in the bundle.

The sentencing activates standard federal post-conviction processes, including potential appeals to the relevant U.S. Court of Appeals within 14 days under Federal Rules of Appellate Procedure. It also contributes to the DOJ's ongoing Cyber Fraud Initiative, prompting further resource allocation for prosecuting ransomware affiliates, as the press release frames this as part of broader enforcement against cyber threats.

Agencies like the FBI may now prioritize related investigations, leading to additional indictments against ALPHV BlackCat network members in the coming months.

This case marks the latest in a series of DOJ actions against ransomware operators, following the 2023 disruption of the ALPHV BlackCat infrastructure by federal authorities, per public records of that operation. The original charges against these defendants stemmed from investigations initiated after victim reports in 2023.