Sebastian Vachon-Desjardins, a Canadian from Gatineau, Quebec, was sentenced in the United States to 20 years in prison for his role in NetWalker ransomware attacks. The U.S. Department of Justice announced the sentence on October 4, 2022. The court also ordered him to forfeit $21.5 million; restitution was still to be determined at the time of the announcement.
Who was sentenced, and what was the case?
Vachon-Desjardins was 35 and lived in Gatineau, Quebec. The Justice Department said he participated in NetWalker ransomware attacks, targeting high-value victims and profiting by encrypting and stealing their data. These details reflect the government’s account in its sentencing announcement and characterization of court documents.
The DOJ said NetWalker attacks affected victims around the world and across multiple sectors, including businesses, municipalities, hospitals, law-enforcement and emergency services, school districts, colleges, and universities. It also said the operation specifically targeted healthcare organizations during the COVID-19 pandemic.
How was he arrested and brought to the United States?
At the request of U.S. authorities, Canadian law enforcement arrested Vachon-Desjardins in Gatineau on January 27, 2021, and searched his home. He was later extradited to the United States under the Canada–U.S. extradition treaty. The DOJ credited the RCMP, Ontario Provincial Police, Gatineau Police Service, and National Cybercrime Coordination Unit with investigative cooperation.
#1 Best Overall
What sentence and financial penalties were imposed?
The U.S. sentence was 20 years in prison. The court also ordered $21.5 million forfeited. The DOJ announcement said restitution would be determined later; it did not provide a subsequent restitution outcome.
Authorities seized C$742,840 and 719 Bitcoin. The Bitcoin’s estimated value depends on the date used:
| Valuation date | Bitcoin value reported by DOJ |
|---|---|
| At the time of seizure | Approximately US$21,849,087 |
| October 4, 2022, sentencing announcement | US$14,463,993 |
These are historical valuations reported by the Justice Department in 2022, not current Bitcoin values. The $21.5 million forfeiture order is a separate case figure and should not be mistaken for a general estimate of ransomware losses.
Is this the same case as the 2026 BlackCat sentences?
No. The 2026 DOJ announcement about Ryan Goldberg and Kevin Martin concerns two American defendants and the separate ALPHV BlackCat ransomware operation. Each received a four-year sentence, according to that announcement. It is unrelated to Vachon-Desjardins’s NetWalker case and his 20-year sentence.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Rank #3
What the official announcement establishes
The U.S. Department of Justice’s Middle District of Florida published its sentencing announcement on October 4, 2022, and updated it October 5, 2022. It is the primary source for the sentence, forfeiture order, asset seizures, arrest, extradition, and the government’s account of the attacks: DOJ: Canadian National Sentenced to 20 Years in Prison for NetWalker Ransomware Attacks.
The announcement describes the prosecution’s case and is not an independent analysis of the attacks. It does not state a later restitution determination.
Quick Recap
Best Value
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
