Shared Intel Helps Law Enforcement Disrupt Ransomware Groups

Coveware's Magnus Jelen on How Early Preparation Prevents Future Compromises Mathew J. Schwartz (euroinfosec) • June 11, 2025

With increased law enforcement takedowns disrupting major threat actor infrastructure, the dynamics of ransomware have shifted. Magnus Jelen, lead director of incident response for the U.K. and EMEA at Coveware/Veeam, said law enforcement efforts have become a critical factor in reducing threat actor confidence and capacity.

See Also: How Generative AI Enables Solo Cybercriminals

A central catalyst behind this progress is the willingness of victim organizations to share intelligence. Jelen advises businesses to act ahead of attacks. Establishing lines of communication with relevant authorities in advance ensures faster, more coordinated responses.

"If you look back a few years, we've seen more and more law enforcement activities and law enforcement taking down some of these threat actor groups," Jelen said. "Companies who get affected by ransomware, we encourage them to ...