Ukrainian Conti Developer Gets 4 Years in US Prison

Oleksii Oleksiyovych Lytvynenko, a Ukrainian national, was sentenced to 48 months in U.S. federal prison for conspiracy to commit wire fraud in connection with Conti ransomware. The U.S. Department of Justice says the Conti operation infected more than 1,000 victims worldwide.

The sentence followed Lytvynenko’s June 2026 guilty plea. Prosecutors said he helped develop and deploy Conti, which encrypted victim systems and disrupted their operations. The case is part of a broader prosecution of the ransomware-as-a-service operation, where developers and affiliates played different roles in carrying out attacks and collecting payments.

The Justice Department’s case page says Lytvynenko was arrested in Ireland in 2023 and extradited to the United States. The government charged him with conspiracy to deploy Conti; he later pleaded guilty to wire-fraud conspiracy. The distinction matters because the sentence followed the plea offense, not a finding at trial on every allegation in the indictment.

Restitution was not set when the sentence was announced. The court scheduled a restitution hearing for November 16, 2026, according to the DOJ case page. That leaves the total financial obligation unresolved even though the prison sentence is final.

Conti operated as a ransomware-as-a-service group during 2021 and 2022. Its internal chat logs, source code, and financial information were leaked in 2022, but the end of the Conti brand did not end prosecutions tied to its members. Law enforcement cases have continued to identify individuals and document the group’s international victim impact.

For ongoing incident and enforcement reporting, see the ransomware topic hub and our coverage of the Veradigm patient-data breach.