iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Oleksii Oleksiyovych Lytvynenko, a Ukrainian national who had been living in Cork, Ireland, was extradited to the United States in October 2025 to face a Conti ransomware case in Tennessee. He later pleaded guilty to conspiracy to commit wire fraud and, on September 10, 2026, was sentenced to four years in prison. Restitution had not yet been determined as of October 4, 2026.
Who was extradited, and what is the case status?
Lytvynenko is the defendant in Middle District of Tennessee case 3:23-CR-00088. The case moved through three distinct stages: an indictment in which the charges were allegations, a guilty plea with admissions, and a prison sentence.
| # | Preview | Product | Price | |
|---|---|---|---|---|
| 1 |
|
Cybersecurity Law | $32.57 | Buy on Amazon |
| 2 |
|
Cybersecurity Law | $77.92 | Buy on Amazon |
| 3 |
|
Cybersecurity Law | $129.00 | Buy on Amazon |
| 4 |
|
THE ENCYCLOPEDIA OF GLOBAL CYBERSECURITY LAW AND DIGITAL GOVERNANCE: A Comprehensive Reference for... | $36.36 | Buy on Amazon |
| 5 |
|
Cybersecurity in Context: Technology, Policy, and Law | $69.50 | Buy on Amazon |
| Date | Stage | What DOJ reported |
|---|---|---|
| July 2023 | Arrest in Ireland | An Garda Síochána arrested Lytvynenko at the United States’ request. DOJ said an Irish court detained him pending extradition proceedings. |
| October 30, 2025 | Extradition and initial appearance | He was extradited to the United States and appeared in the Middle District of Tennessee. The indictment charged conspiracy to commit computer fraud and conspiracy to commit wire fraud; at that stage, those were allegations. DOJ’s extradition announcement |
| June 10, 2026 | Guilty plea | He pleaded guilty to conspiracy to commit wire fraud. DOJ announced the plea on June 12. DOJ’s plea announcement |
| September 10, 2026 | Sentencing | He received a four-year prison sentence. The court reserved restitution for a later determination. DOJ’s sentencing announcement and Tennessee case information |
The initial indictment’s presumption-of-innocence language described the charging stage. It is not the current status: Lytvynenko subsequently pleaded guilty and was sentenced.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →What did Lytvynenko admit, and what had prosecutors alleged?
Indictment allegations
DOJ’s October 2025 account of the indictment alleged that, from around 2020 through about June 2022, Lytvynenko and others used Conti to extort victims and steal data. The alleged method involved breaking into computer networks, encrypting data, and demanding ransom to restore access and prevent stolen information from being disclosed. The indictment-stage release said more than $500,000 in cryptocurrency was extorted from two victims in the Middle District of Tennessee, and information stolen from a third victim there was published. These were allegations in the charging account, not plea admissions described in the later release. DOJ’s October 2025 announcement
#1 Best Overall
Plea admissions
In DOJ’s account of his plea, Lytvynenko admitted joining the Conti conspiracy no later than approximately September 2021 and possessing data stolen from eight U.S. victims and four victims overseas. He also admitted that he joined a team run by a Conti conspirator and was directed to code a “loader.” DOJ described a loader as a type of malware used to load programs needed for other malicious attacks. DOJ’s June 2026 announcement
DOJ’s sentencing account
In announcing the sentence, DOJ characterized Lytvynenko as both an intruder and a developer and said he had personally harmed at least 12 companies. Those are descriptions in DOJ’s September 2026 announcement. DOJ’s September 2026 announcement
Rank #2
What was Conti ransomware, and how extensive was the activity?
Conti was a ransomware operation used to encrypt victims’ data and support extortion demands, according to DOJ’s description of the case. The department’s releases said Conti was used against more than 1,000 victims worldwide, including targets in 47 U.S. states, the District of Columbia, Puerto Rico, and 31 foreign countries. DOJ attributed the ransom-payment figure to the FBI: at least $150 million, estimated as of January 2022. These are government-reported counts and an FBI estimate, not independently audited totals. DOJ’s October 2025 account DOJ’s September 2026 account
What happens next in the case?
As of October 4, 2026, restitution remained unresolved. The Middle District of Tennessee case page listed a restitution hearing for November 16, 2026; that hearing was still upcoming at the time of the latest status described here. The case page identifies Lytvynenko’s matter as 3:23-CR-00088. A separate case, 3:23-CR-00092, concerns Maksim Galochkin, Maksim Rudenskiy, Mikhail Tsarev, and Andrey Zhuykov; it is not Lytvynenko’s case. Middle District of Tennessee case information
Rank #3
What the officials said about the sentence
In its September 10, 2026 release, Assistant Attorney General A. Tysen Duva of the Justice Department’s Criminal Division said, “Today’s sentence reflects the seriousness of ransomware and the Department’s commitment to protecting America’s hospitals, schools, businesses, and local governments.” U.S. Secret Service Office of Field Operations Assistant Director Brent Daniels said, “Today’s sentence is a measure of justice for the victims whose data, operations, and livelihoods were put at risk.” These are officials’ characterizations in DOJ’s announcement, rather than separate findings by the court. DOJ’s sentencing announcement
Quick Recap
Best Value
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
