The person at the center of this case
Alexsey Belan (fugitive suspect)
Justice for Alexsey Belan (fugitive suspect) โ the trail went cold in 2017, but the truth hasn't.
Start here
Why has Belan remained at large despite three federal indictments and international law enforcement attention since 2012?
What is the full scope of user data stolen from major webmail and e-commerce companies, and how many individuals were affected?
What countries beyond Russia, Greece, Latvia, the Maldives, and Thailand might Belan use for travel or refuge?
Alexsey Belan, a Russian cybercriminal, has been indicted three times for major computer intrusions targeting major U.S. webmail and e-commerce companies, stealing millions of user databases and account credentials between 2012 and 2016. Federal arrest warrants were issued in Nevada (2012), California (2013), and again in California (2017) for conspiracy with Russian intelligence officers to commit fraud, theft of trade secrets, and economic espionage. Belan remains at large with a $100,000 reward; he holds Russian citizenship, speaks Russian, and was last known to be in Krasnodar, Russia, though he may travel to Greece, Latvia, the Maldives, or Thailand.
Try asking
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
Beyond the top three above โ each detail below could be the thread that pulls this case open.
Who are the Russian intelligence officers Belan conspired with, and what was the nature of their coordination in the intrusions?
How does Belan's known appearance (brown hair, may wear glasses, may dye hair red or blond) help distinguish him in surveillance or travel records?
Even the smallest detail could be the key to solving this case.
Official wording
Conspiring to Commit Computer Fraud and Abuse; Accessing a Computer Without Authorization for the Purpose of Commercial Advantage and Private Financial Gain; Damaging a Computer Through the Transmission of Code and Commands; Economic Espionage; Theft of Trade Secrets; Access Device Fraud; Aggravated Identity Theft; Wire Fraud Caution: Alexsey Belan has been indicted three times for crimes relating to computer intrusions. From January of 2014, and continuing through December of 2016, Belan is alleged to have conspired with Russian intelligence officers, including Dmitry Aleksandrovich Dokuchaev , Igor Anatolyevich Sushchin , and others, to gain unauthorized access to the computer networks of and user accounts hosted at major companies providing worldwide webmail and internet-related services in the Northern District of California and elsewhere.
A federal arrest warrant for Belan was issued on February 28, 2017, by the United States District Court, Northern District of California, San Francisco, California, based on an indictment charging him with conspiring to commit computer fraud and abuse; accessing a computer without authorization for the purpose of commercial advantage and private financial gain; damaging a computer through the transmission of code and commands; economic espionage; theft of trade secrets; access device fraud; and wire fraud. Between January of 2012, and April of 2013, Belan is alleged to have intruded the computer networks of three major United States based e-commerce companies in Nevada and California.
He is alleged to have stolen their user databases which he then exported and made readily accessible on his server. Belan allegedly stole the user data and the encrypted passwords of millions of accounts and then negotiated the sales of the databases.
Two separate federal arrest warrants and indictments for Belan have been issued in relation to these activities. One was issued on September 12, 2012, in the United States District Court, District of Nevada, Las Vegas, Nevada, after Belan was charged with obtaining information by computer from a protected computer; possession of fifteen or more unauthorized access devices; and aggravated identity theft.
The second warrant was issued on June 6, 2013, in the United States District Court, Northern District of California, San Francisco, California, after Belan was charged with two counts of fraud in connection with a computer and two counts of aggravated identity theft. He was also designated as subject to sanctions per a Presidential Executive Order dated December 29, 2016.
Remarks: Belan has Russian citizenship and is known to hold a Russian passport. He speaks Russian and may travel within Russia, Greece, Latvia, the Maldives, and Thailand.
He may wear eyeglasses and dye his brown hair red or blond. He was last known to be in Krasnodar, Russia.
Belan begins intruding computer networks of three major U.S. e-commerce companies in Nevada and California
U.S. District Court, District of Nevada issues warrant for unauthorized computer access and aggravated identity theft
U.S. District Court, Northern District of California issues warrant for computer fraud and aggravated identity theft
Belan allegedly conspires with Russian intelligence officers including Dmitry Aleksandrovich Dokuchaev and Igor Anatolyevich Sushchin
U.S. District Court, Northern District of California issues warrant for conspiracy, computer fraud, economic espionage, and theft of trade secrets
For information leading to the resolution of this case
For information leading to the resolution of this case