US Confirms Takedown of BlackSuit Ransomware Behind 450+ Hacks

Federal law enforcement agencies have successfully dismantled the critical infrastructure of BlackSuit ransomware, a sophisticated cybercriminal operation that has compromised over 450 victims across the United States since 2022 and collected more than $370 million in ransom payments.

Major International Operation Targets Cyber Criminal Network

ICE’s Homeland Security Investigations (HSI) led the coordinated takedown in partnership with U.S. and international law enforcement agencies, seizing servers, domains, and digital assets used by the ransomware group.

BlackSuit, identified as the successor to the notorious Royal ransomware, has specifically targeted essential services including healthcare systems, educational institutions, public safety organizations, energy infrastructure, and government agencies.

“Disrupting ransomware infrastructure is not only about taking down servers — it’s about dismantling the entire ecosystem that enables cybercriminals to operate with impunity,” said HSI Cyber Crimes Center Deputy Assistant Director Michael Prado.

The operation demonstrates unprecedented international coordination in combating cybercrime.

The ransomware groups ...