Phobos Ransomware Affiliates Arrested in Coordinated International Disruption

The U.S. Justice Department announced unsealed charges and arrests of individuals accused of operating the Phobos ransomware and the 8Base affiliate network, which from May 2019 through at least October 2024 allegedly victimized over 1,000 organizations (including hospitals and schools), extorted more than $16 million, and used darknet sites to publish stolen data; international partners disrupted servers and seized infrastructure in the operation.