ThreatPaper
Unverified

Media Land caused more than $62 million in victim losses

Assessment

Two things separate this figure from an established loss. It is an allegation in an unsealed indictment, and the Department of Justice states plainly that "an indictment is merely an allegation" and that defendants are presumed innocent. All three defendants are in St Petersburg, none is in US custody, and no extradition route realistically exists. The figure will therefore in all likelihood never be tested at trial, which means it will stand indefinitely as an untested allegation reported as a measured loss. The causation is also more specific than the phrasing suggests. The defendants are not alleged to have deployed ransomware or entered a victim network. They are charged with conspiracy, and with aiding and abetting — a theory under which losses caused by their customers attach to them. That is a legitimate and long-established charging theory, and it is a different statement from "this company took $62 million." The losses were caused by LockBit, BlackSuit and Play operations; the allegation is that Media Land knowingly made them possible. Rated Unverified rather than False because the figure is the government's own, sourced and consistent across reporting. What is unsupported is treating an untested allegation about attributed causation as a settled measurement of what a hosting company did.

Where this claim appeared

BleepingComputer · 2026-07-14

https://www.bleepingcomputer.com/news/security/us-charges-alleged-russian-bulletproof-hosting-service-operators/

What “Unverified” means

Widely repeated, but no supporting evidence was located. This is not a statement that the claim is false — it is a statement that nothing published supports it, which is a different and more common problem.

2 of 5 · rating scale

Assessed in

Media Land: The Bulletproof Hosting Business That Kept Ransomware Online

Think this assessment is wrong? Report an error.