WASHINGTON D.C. – A coordinated international law enforcement blitz has crippled the BlackSuit (Royal) ransomware group, seizing critical infrastructure and a cool $1,091,453 in laundered cryptocurrency. The takedown, executed July 24, 2025, targeted servers and domains used by the gang to wreak havoc on U.S. businesses and critical infrastructure. While no arrests have been publicly announced, the disruption represents a significant blow to a digital extortion ring that’s been quietly bleeding companies dry.
The operation involved a multi-agency task force including Homeland Security Investigations (HSI), the U.S. Secret Service, IRS Criminal Investigation (IRS-CI), the FBI, and international partners from the United Kingdom, Germany, Ireland, France, Canada, Ukraine, and Lithuania. Four servers and nine domains associated with BlackSuit were taken offline, effectively disrupting their ability to deploy ransomware and communicate with victims. The seized cryptocurrency, valued at over a million dollars at the time of seizure, represents a portion of the ransom payments extorted from targeted organizations.
Assistant Attorney General for National Security John A. Eisenberg minced no words, stating the BlackSuit gang’s attacks on U.S. critical infrastructure are a “serious threat to U.S. public safety.” He highlighted the ongoing collaborative effort between agencies to defend the nation against such threats. U.S. Attorney Erik S. Siebert for the Eastern District of Virginia promised a “forward-leaning, disruption-first approach,” vowing to “pull no punches” in protecting businesses and infrastructure from cybercriminals.
The operation wasn’t just about taking down servers, according to HSI Deputy Assistant Director Michael Prado. “Disrupting ransomware infrastructure is not only about taking down servers — it’s about dismantling the entire ecosystem that enables cybercriminals to operate with impunity,” he stated. The focus is on choking off the financial arteries that fuel these criminal enterprises, making it harder for them to profit from their malicious activities. The IRS-CI is playing a key role in tracing and seizing the illicit funds, according to Executive Special Agent in Charge Kareem Carter.
U.S. Secret Service Special Agent in Charge William Mancino emphasized the agency’s commitment to dismantling criminal enterprises. “This operation strikes a critical blow to BlackSuit’s infrastructure and operations,” Mancino said. “The U.S. Secret Service is committed to working alongside our law enforcement partners to dismantle criminal enterprises and prevent the deployment of malicious ransomware that victimizes businesses and organizations.” U.S. Attorney Jeanine Ferris Pirro for the District of Columbia vowed to “go toe-to-toe with criminals” and “make victims whole,” signaling a commitment to pursuing justice and restitution for those impacted by BlackSuit’s ransomware attacks.
While the takedown is a significant victory, authorities warn that ransomware remains a persistent and evolving threat. The investigation is ongoing, and further actions are expected as law enforcement continues to track down the individuals behind the BlackSuit operation. The details of the initial HSI announcement outline the scope of the operation, and suggest a broader, coordinated strategy to combat ransomware on a global scale. The financial impact of ransomware attacks continues to escalate, making these disruption efforts all the more critical.
Related Federal Cases
- Danielle Hillmer, Cybersecurity Fraud, District of Columbia 2023 · District of Columbia
- Michael Stuckey, Gun Runner Sentenced to 13+ Years, Washington D.C…. · North Carolina
- Charles General, Possession of Stolen Handgun, Washington D.C., 2023 · Virginia
- Charles General, Possession of Stolen Firearm, Washington DC, 2023 · West Virginia
- Charles General, Possession of Stolen Firearm, Washington D.C., 2023 · Virginia
Key Facts
- Agency: U.S. Secret Service
- Category: Cybercrime
- Source: Official Press Release
Get the grimiest stories delivered weekly. Subscribe free
Browse More
