Armenian National Sentenced in U.S. Court for Role in Ryuk Ransomware Campaign

An Armenian citizen, Karen Vardanyan, was handed a prison term by a U.S. federal court for his involvement in the Ryuk ransomware operation that crippled a series of organizations across multiple sectors.

The court also ordered Vardanyan to pay more than $1.2 million in restitution to the victims who suffered data loss, operational downtime, and costly recovery efforts after the malware encrypted their systems.

Ryuk, a strain of ransomware first observed in 2018, has been linked to high‑profile attacks on hospitals, municipal governments and private enterprises. Its typical modus operandi involves gaining network access, deploying encryption payloads, and demanding large sums in cryptocurrency to restore files.

Prosecutors highlighted that Vardanyan’s actions facilitated the distribution of the malicious code and helped coordinate ransom negotiations, thereby amplifying the financial damage inflicted on the affected entities.

The sentencing underscores a broader law‑enforcement push to hold cybercriminals accountable, even when they operate from abroad. In recent years, U.S. authorities have increasingly pursued international actors through extradition agreements and coordinated investigations with foreign partners.

While the exact length of Vardanyan’s prison term was not disclosed in the brief, the restitution order signals a judicial effort to compensate victims and deter future ransomware operations. Analysts note that the financial penalty, though significant, may only cover a fraction of the total losses incurred, prompting calls for stronger cyber‑security policies and more robust incident‑response capabilities across vulnerable sectors.