3 Russians indicted in $62M cybercrime scheme that hit hospitals

 Three Russian nationals and two St. Petersburg-based “bulletproof hosting” companies face federal charges for running criminal infrastructure that enabled cyberattacks causing more than $62 million in U.S. victim losses, including against hospitals. The Justice Department unsealed the indictment July 14 in the Northern District of Ohio.

The indictment names Alexander Alexandrovich Volosovik, 43; Kirill Andreevich Zatolokin, 34; and Yulia Vladimirovna Pankova, 29, along with Medialand LLC and ML.Cloud LLC. Prosecutors allege the companies leased server infrastructure to cybercriminals, enabling ransomware deployment, phishing, brute-force attacks and fraudulent domain registration while helping clients evade law enforcement detection.

U.S. Attorney David M. Toepfer for the Northern District of Ohio said victims spanned Ohio and 20 other states, and included hospitals, banks, schools, government entities and media companies. According to the indictment, 42 victims across 21 states were targeted by criminal groups using Medialand’s and ML.Cloud’s services.

The charges follow November 2025 Treasury sanctions against the same defendants and companies, joined by the United Kingdom and, in part, Australia. The State Department’s Rewards for Justice program is now offering up to $10 million for information on the defendants’ foreign government-linked associates or activities.

The FBI’s Cleveland Division led the investigation with the Cybersecurity and Infrastructure Security Agency and the Treasury Department’s Office of Foreign Assets Control. The action is part of Operation Riptide, the FBI’s ongoing campaign against cybercrime infrastructure, as Americans reported more than $20 billion in cybercrime losses last year, a 26% single-year increase.

https://www.beckershospitalreview.com/healthcare-information-technology/cybersecurity/3-russians-indicted-in-62m-cybercrime-scheme-that-hit-hospitals/