Latvian Ransomware Negotiator Sentenced in Landmark Cybercrime Case A Latvian national, Deniss Zolotarjovs (35), has been sentenced to 102 months in U.S. federal prison for his role as a key negotiator in a sophisticated Russian ransomware syndicate. Operating between June 2021 and August 2023, the group targeted over 54 organizations worldwide, employing psychological extortion tactics to coerce victims into paying ransoms. Zolotarjovs specialized in leveraging stolen data, identifying the most damaging information to pressure victims who resisted initial demands. His methods included distributing sensitive records such as children’s medical files from a pediatric healthcare provider when targets refused to comply. The syndicate, led by former Conti members, used multiple ransomware strains (Akira, Royal, Karakurt, TommyLeaks, and SchoolBoys) to obscure their activities and evade detection. Based in St. Petersburg, Russia, the group operated with corporate-like structure, laundering proceeds through shell companies and recruiting former Russian law enforcement to access government databases. Corruption was systemic, with bribes used to avoid military conscription and tax obligations. Financial losses from just 13 known victims exceeded $56 million, with an additional $13 million paid by 41 others. The true impact is likely higher due to underreporting. Beyond financial harm, attacks disrupted critical infrastructure, including a 911 emergency response system. Zolotarjovs was arrested in Georgia in December 2023, extradited to the U.S. in August 2024, and pleaded guilty to money laundering and wire fraud conspiracy in July 2025. His sentencing reflects a coordinated international effort, led by the FBI’s Cincinnati Field Office, to hold ransomware operatives accountable regardless of location.