Cybersecurity Policy Report, Cyber Crime Group Targeted by Law Enforcement From Eight Nations, (Aug 11, 2025)
Organizations Mentioned:U.S. Secret Service
Law enforcement agencies from eight nations have seized Internet infrastructure to disrupt the BlackSuit and Royal ransomware cyber crime groups, the Department of Justice announced today.
The seizures included four servers, nine Internet domains, and cryptocurrency valued at $1.1 million, DoJ said in a news release.
The operation involved the Federal Bureau of Investigation, Internal Revenue Service, U.S. Secret Service, Homeland Security Investigations (HSI), and law enforcement agencies from the United Kingdom, Germany, Ireland, France, Canada, Ukraine, and Lithuania, DoJ said.
“BlackSuit (Royal) ransomware attacks have targeted numerous critical infrastructure sectors including, but not limited to, critical manufacturing, government facilities, healthcare and public health, and commercial facilities,” the department said.
“Disrupting ransomware infrastructure is not only about taking down servers—it’s about dismantling the entire ecosystem that enables cybercriminals to operate with impunity,” said Michael Prado, an HSI deputy assistant director. “This operation is the result of tireless international coordination and shows our collective resolve to hold ransomware actors accountable.”
“Since 2022, the Royal and BlackSuit ransomware groups have compromised over 450 known victims in the United States, including entities in the healthcare, education, public safety, energy and government sectors,” according to an HSI news release.
“Combined, the groups have received more than $370 million in ransom payments, based on present-day valuations of cryptocurrency,” HSI said. “The ransomware schemes used double-extortion tactics—encrypting victims’ systems while threatening to leak stolen data to further coerce payment.”
“This investigation reflects the full reach of HIS’s cyber mission and our commitment to protecting victims—whether they’re small businesses, school systems, or hospitals,” said Christopher Heck, an HSI special agent. “We will continue to target the infrastructure, finances and operators behind these ransomware groups to ensure they have nowhere left to hide.”
News: FederalLegislation InternationalLegislation LitigationEnforcement DataSecurity