US DOJ Unseals Medialand and ML.Cloud Indictment Over Alleged $62m Losses

15th Jul 2026
The U.S. Department of Justice has unsealed an indictment against Medialand LLC, ML.Cloud LLC and three Russian nationals over an alleged cybercrime operation said to have caused more than $62 million in victim losses. The indictment, returned by a federal grand jury in December 2024, was unsealed in the Northern District of Ohio on 14 July 2026. Alexander Alexandrovich Volosovik, Kirill Andreevich Zatolokin and Yulia Vladimirovna Pankova are charged alongside the two St Petersburg-based companies. The counts include conspiracy to commit and aid and abet computer fraud, conspiracy to commit wire fraud, wire fraud and conspiracy to commit money laundering. Prosecutors allege that Medialand and ML.Cloud supplied “bulletproof hosting” infrastructure that allowed criminal customers to distribute malware and ransomware, operate fraudulent domains and launch phishing and brute-force attacks while attempting to avoid detection by law enforcement. Court documents cited by the Justice Department allege that criminal groups using the companies’ services targeted 42 victims across 21 US states. Banks, schools, government bodies, hospitals and media companies were among the organisations allegedly targeted. The infrastructure was also said to operate through China, Finland, the Netherlands and the United States, giving the prosecution a cross-border character that will require continuing evidence-sharing and cooperation between agencies. The U.S. Department of State’s Rewards for Justice programme has offered up to $10 million, together with possible relocation, for actionable information concerning the defendants, their alleged cyber activity or foreign government-linked use of Medialand and ML.Cloud. The Office of Foreign Assets Control imposed sanctions in November 2025 in coordination with the UK Foreign, Commonwealth and Development Office and Australia’s Department of Foreign Affairs and Trade. The FBI Cleveland Division is leading the investigation with assistance from the Cybersecurity and Infrastructure Security Agency, OFAC, the UK National Crime Agency, the Australian Federal Police and authorities in the Netherlands. The prosecution forms part of Operation Riptide, the FBI campaign directed at cybercriminal actors, infrastructure and financial networks. Trial Attorney Christen Gallagher of the Computer Crime and Intellectual Property Section and Assistant U.S. Attorney Duncan T. Brown are prosecuting. The indictment remains an allegation, and all defendants are presumed innocent unless proved guilty beyond a reasonable doubt. Solicitors, barristers and in-house counsel advising hosting providers, cloud businesses, financial institutions and critical-infrastructure operators should review customer due diligence, sanctions screening, payment monitoring and evidence-preservation procedures. Comparable investigations may require law firms to coordinate cross-border disclosure, secure access to data and manage contact with the U.S. Department of Justice, OFAC and other enforcement agencies across related criminal matters, sanctions proceedings and regulatory action.