North Macedonian Prosecutors Indict Young Operator of OLVX Data‑Theft Marketplace

Prosecutors in the Republic of North Macedonia have formally charged a 20‑year‑old citizen suspected of running OLVX, an online platform that facilitated the sale of stolen personal information, login credentials and hacking tools beginning in 2023.

According to the indictment, the accused oversaw the marketplace’s operations, connecting buyers with vendors who trafficked compromised data harvested from a range of sources, including phishing campaigns and data breaches. The site reportedly offered a catalogue of illicit services that enabled cybercriminals to launch ransomware attacks, credential stuffing and other malicious activities against individuals and organizations worldwide.

Authorities say the investigation was triggered after a series of high‑profile cyber incidents were linked to tools advertised on OLVX. Law‑enforcement analysts traced digital footprints, such as cryptocurrency transactions and server logs, back to the suspect’s internet service provider in Skopje. The evidence, prosecutors claim, demonstrates that the young man acted as the marketplace’s administrator, managing listings, vetting sellers and handling payments.

North Macedonian officials emphasized that the case reflects a broader effort to disrupt underground cybercrime infrastructure that often operates across borders. The country has been cooperating with Europol and other international partners to dismantle networks that profit from data theft. While OLVX is believed to have emerged only recently, its rapid growth underscores how quickly new platforms can appear and attract a global clientele.

Legal experts note that the charges could carry a substantial prison term, given the severity of the alleged offenses. Under Macedonian law, operating a cybercrime marketplace can be punished with up to ten years in prison, especially when the activity results in significant financial loss or threatens national security. The indictment also cites potential violations of data protection statutes, which protect citizens’ personal information from unauthorized collection and distribution.

The case remains pending, and the defendant has not publicly commented. If convicted, the outcome may set a precedent for how the region addresses digital crime and could encourage further collaboration with foreign agencies to trace and prosecute operators of similar illicit sites. Observers will watch the trial for indications of how effectively Macedonian courts can impose penalties that deter the burgeoning market for stolen data and hacking services.