Cybercrime

US Says 19 People Charged Following 2019 Takedown of xDedic Cybercrime Marketplace

Justice Department says 19 people involved in the xDedic cybercrime marketplace have been charged to date following its 2019 takedown.

Hacker arrested

The US Justice Department announced on Thursday that 19 people involved in the management and use of the xDedic cybercrime marketplace have been charged following its takedown in 2019.

The xDedic Marketplace was a site on the dark web where users sold and bought stolen server credentials and personal information. Authorities said over 700,000 credentials associated with servers housed by government, healthcare, transportation, higher education, financial and other types of organizations from around the world were offered on the website.

An international law enforcement operation dismantled the cybercrime enterprise in 2019 and investigators have since been working on identifying and prosecuting xDedic administrators, buyers and sellers.

The United States has charged 19 individuals, including Moldovan national Alexandru Habasescu and Ukrainian national Pavlo Kharmanskyi, who were the website’s administrators.

Habasescu was arrested in 2022 in the Spanish Canary Islands and Kharmanskyi was arrested in 2019 as he was trying to enter the United States. They were later sentenced to 41 and 30 months in prison, respectively.

A top seller in terms of server credential volume, who made more than $350,000, was Russian national Dariy Pankov. He was sentenced to 60 months in prison after being extradited from the Republic of Georgia, where he was arrested in 2022.

Advertisement. Scroll to continue reading.

Nigerian national Allen Levinson, described by authorities as a top buyer, was sentenced to 78 months in prison. He used information obtained from hacked accounting firm servers to file false tax returns with the US government, attempting to obtain over $60 million. 

The remaining cybercriminals are from Ukraine, UK, Nigeria, and the states of California, Oklahoma, Georgia, Illinois, New York, and Texas. 

They have received sentences ranging between 5 years probation and 78 months in prison. Sentencing is pending for five individuals. 

In addition, two suspects who face up to 20 years in prison, should soon be extradited from the United Kingdom for charges related to their roles in the cybercrime scheme. 

Related: 4 Nigerians Arrested in Europe Over US Charges Involving Hacking, Fraud

Related: Los Angeles SIM Swapper Sentenced to 8 Years in Prison

Related: Russian National Arrested, Charged in US Over Role in LockBit Ransomware Attacks

Related Content

Cybercrime

Maksim Silnikau was the creator and administrator of the ransomware group and involved in Angler EK’s distribution.

Cybercrime

Thalha Jubair and Owen Flowers were prosecuted over a 2024 cyberattack targeting Transport for London (TfL).

Cybercrime

Angelo Martino, a former ransomware negotiator, was sentenced to 70 months for helping the BlackCat/Alphv group.

Cybercrime

Nathan Austad has been ordered to pay roughly $1.8 million in forfeiture and restitution, and the sentence also includes 3 years of supervised release. 

Cybercrime

Catalin Dragomir previously pleaded guilty to selling access to an Oregon state government office’s network.

Cybercrime

Deniss Zolotarjovs was directly involved in extortion strategies and in negotiations with victim companies.

Cybercrime

Ryan Goldberg of Georgia and Kevin Martin of Texas were each sentenced to four years in prison. 

Cybercrime

Kamerin Stokes sold stolen credentials through an online marketplace even after pleading guilty to his role in the DraftKings attack. 

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version