What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
In the week of 16–20 October 2023, authorities from eleven countries targeted the Ragnar Locker ransomware group, seizing infrastructure in the Netherlands, Germany and Sweden and taking down its Tor data-leak website in Sweden. Europol and Eurojust supported the international operation; Eurojust identifies France as the coordinating country. The action disrupted key systems, but the official accounts do not establish that Ragnar Locker permanently stopped operating.
What happened in the October 2023 operation?
Law enforcement and judicial authorities carried out coordinated action against Ragnar Locker during the week of 16–20 October 2023. Europol reported that authorities from eleven countries took part, with Europol and Eurojust coordinating internationally. Eurojust describes France as coordinating the operation, with support from both agencies.
The operation focused on identifying and shutting down servers used by the group, particularly systems involved in exfiltrating stolen data and publishing it. Europol reported that infrastructure was seized in the Netherlands, Germany and Sweden. The group’s associated Tor data-leak website was taken down in Sweden. Eurojust also reported cryptocurrency seizures but did not state a value in its available summary.
Which countries and agencies were involved?
The official accounts describe an international effort involving authorities from eleven countries. Europol and Eurojust supported coordination, while Eurojust names France as the coordinating country. The available summaries do not provide a complete list of all eleven countries.
Free tools Windows power users keep installed
One-click scans. No signup required.
#1 Best Overall
Europol characterized the action as “a major blow to one of the most dangerous ransomware operations of recent years.” The statement is attributed to Europol as an institution; the account does not identify an individual speaker. Europol’s operation account and Eurojust’s account provide the agencies’ summaries.
How does the operation relate to earlier arrests?
The October 2023 action followed investigative work in Ukraine in 2021. Europol and Eurojust say that earlier action led to the arrest of two suspects. In October 2023, Europol additionally reported the arrest of a person suspected of being a Ragnar Locker developer. These are distinct stages of the investigation: the 2021 arrests preceded the later infrastructure seizures and leak-site takedown.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Does this mean Ragnar Locker ransomware ended?
Not on the basis of the official operation summaries alone. Seizing infrastructure and removing a leak site can disrupt a ransomware operation, but the cited accounts do not assess whether Ragnar Locker activity continued, stopped permanently or reappeared under another form. They also do not give a broader victim count or financial-loss total. Treat the October action as a significant disruption, not proof of the group’s permanent demise.
Quick Recap
Best Value
Rank #4
Rank #3
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

