iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
The U.S. State Department announced a reward of up to $10 million for actionable information about three Russian nationals charged in an alleged international cybercrime operation. The official announcements do not say the defendants hacked an energy firm: they describe alleged attacks affecting victims in multiple sectors and say two companies linked to the defendants supplied infrastructure used by criminal clients.
Who is the U.S. offering $10 million for information about?
The defendants are Alexander Alexandrovich Volosovik, Kirill Andreevich Zatolokin, and Yulia Vladimirovna Pankova. An indictment also names two companies, Media Land, LLC, and ML.Cloud, LLC. The U.S. Department of Justice announced on July 14, 2026, that an indictment returned in December 2024 had been unsealed. The Northern District of Ohio announcement and the national DOJ announcement describe the case.
The State Department’s Rewards for Justice program announced up to $10 million, plus possible relocation, for information in specified categories. The offer was announced on July 14, 2026; its current availability and terms have not been independently confirmed here.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
What information may qualify for the reward?
According to DOJ and State Department descriptions, actionable information may concern:
#1 Best Overall
- Associates of the three individuals who are linked to a foreign government.
- Their malicious cyber activities.
- Foreign-government-linked use of Media Land or ML.Cloud.
DOJ’s district announcement directs potential informants to a Tor-based reporting channel. The reward is for information in the stated categories, not a general payment for reporting any cybercrime.
What are Media Land and ML.Cloud accused of doing?
DOJ says the companies supplied computer-server infrastructure and related internet services. Prosecutors describe “bulletproof hosting” as infrastructure marketed or leased to criminal clients to help them commit crimes and evade law enforcement.
According to allegations described in court documents, the companies provided infrastructure and technical support used by criminal co-conspirators to infect computers with malware and ransomware and extort victims for money and cryptocurrency. DOJ also says the services supported criminal marketplaces, fraudulent domain registrations, phishing, and brute-force attacks. These are allegations, not established findings.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →How many victims and states were affected?
The national DOJ release says criminal groups using the companies’ services targeted 42 victims in 21 states. The district announcement says victims were in Ohio and at least 20 other states, as well as several countries, including Australia, Canada, the United Arab Emirates, the United Kingdom, and countries in the European Union. DOJ identifies banks, schools, government entities, hospitals, and media companies among the affected sectors.
Rank #3
DOJ reports more than $62 million in losses and describes the investigation as seven years long. The loss figure is the government’s account of this case, not a measure of losses attributed solely to a particular defendant or a single type of attack.
Did the alleged attacks target an energy company?
The DOJ announcements reviewed do not identify an energy firm as a specific victim or say the defendants hacked one. They describe alleged cybercrime affecting critical infrastructure and victims across several sectors. The phrase “energy firm hackers” therefore overstates what the official case descriptions establish.
Were the defendants convicted?
No conviction is reported in the July 2026 announcements. The defendants are charged with conspiracy to commit and aid and abet computer fraud, conspiracy to commit wire fraud, wire fraud, and conspiracy to commit money laundering. DOJ states that they are presumed innocent unless and until proven guilty beyond a reasonable doubt.
Free tools Windows power users keep installed
One-click scans. No signup required.
Case timeline and sanctions
- December 2024: A federal grand jury returned the indictment, according to DOJ.
- November 2025: DOJ says U.S. sanctions were announced against the indicted defendants and companies. The national release says the sanctions block U.S. property and prohibit transactions by U.S. persons.
- July 14, 2026: DOJ announced the unsealing, and the State Department announced the reward. The district announcement was updated July 17, 2026.
The releases do not establish later court proceedings or confirm whether the reward remains open.
Best Value
What officials said
David M. Toepfer, U.S. Attorney for the Northern District of Ohio, said: “The victims in this case are not only in Ohio, but also in 20 other states across the country, touching every aspect of Americans’ lives.”
Brett Leatherman, assistant director of the FBI Cyber Division, said the actions were aimed at “the core services that cybercriminals rely on to attack U.S. critical infrastructure.” CISA Industry Team Operations Manager Nicholas Colella said cybercriminals persist in efforts to disrupt networks and systems while remaining difficult to detect and trace.
The national DOJ release also cites more than $20 billion in reported cybercrime losses and a 26 percent year-over-year increase, attributing those figures to Americans’ reports to the FBI in the preceding year. Those figures provide broader context and are not losses in this case.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
