U.S. Sanctions LockBit Leader, Disrupts Platform Behind Quarter of All Ransomware Attacks

The Treasury Department designated Dmitry Yuryevich Khoroshev as the leader of the LockBit ransomware group and imposed sanctions on him and affiliates, degrading the dominant ransomware-as-a-service platform that had accounted for roughly 25% of tracked ransomware incidents. The disruption of LockBit's infrastructure marks one of the most significant takedowns in ransomware enforcement history, combining financial sanctions with criminal prosecutions to dismantle the economic ecosystem sustaining these operations.