The person at the center of this case
Multiple ransomware attack victims (corporate and institutional)
Cold Case · Open - Wanted by FBI
184 days waiting
YEVGENIY IGOREVICH POLYANIN
Justice for Multiple ransomware attack victims (corporate and institutional) — the trail went cold in 2026, but the truth hasn't.
Start here
Key leads to think about
🎯
suspect
Lead #1What is Polyanin's current location and is he still actively conducting ransomware operations?
🔍
evidence
Lead #2How many victims have been identified and what is the total financial impact of his ransomware attacks?
📞
contact
Lead #3Are there known associates or other REvil/Sodinokibi affiliates working with Polyanin?
Yevgeniy Igorevich Polyanin is wanted by the FBI for his alleged role in deploying Sodinokibi and REvil ransomware attacks against multiple victims, extorting millions through encrypted ransom demands and cryptocurrency payments. The investigation has established his involvement in a sophisticated money laundering scheme tied to ransomware proceeds, but his current whereabouts remain uncertain despite intelligence suggesting he may be located in Russia. Public assistance in locating Polyanin or identifying additional victims could help dismantle this ransomware operation and recover stolen data.
Case
#1091
United States District Court for the Northern District of Texas; FBI Cyber Division
Try asking
Claim this imported case
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
10 uploads25 AI questions/day
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
More leads to consider
Beyond the top three above — each detail below could be the thread that pulls this case open.
💡
clue
Lead #4What cryptocurrency wallets and payment addresses were used to receive ransom payments?
Have information about any of these leads?
Even the smallest detail could be the key to solving this case.
Official wording
Source Narrative
Conspiracy to Commit Fraud and Related Activity in Connection with Computers; Intentional Damage to a Protected Computer; Conspiracy to Commit Money Laundering Caution: Yevgeniy Igorevich Polyanin is wanted for his alleged involvement in ransomware attacks and money laundering activities. It is alleged that, through the use and deployment of Sodinokibi and REvil ransomware, Polyanin left electronic notes in the form of a text file on victims’ computers.
The notes included web addresses for the victims to visit and have their files decrypted. Upon visiting these web addresses, victims were given the ransom amount demanded and provided a virtual currency address to use to pay the ransom.
If a victim paid the ransom amount, Polyanin provided the decryption key, and the victims then were able to access their files. If a victim did not pay the ransom, Polyanin typically posted the victims’ exfiltrated data or claimed he sold the exfiltrated data to third parties.
Polyanin has been charged in an indictment filed in the United States District Court for the Northern District of Texas, Dallas, Texas, with conspiracy to commit fraud and related activity in connection with computers, substantive counts of intentional damage to protected computers, and conspiracy to commit money laundering. Remarks: Polyanin is believed to be in Russia, possibly in Barnaul, and is one of many Sodinokibi/REvil ransomware affiliates.
Timeline of Events
🕵️
Unknown
Ransomware campaign
Polyanin deployed Sodinokibi and REvil ransomware against multiple victims, leaving ransom notes with payment instructions
📋
Unknown
Money laundering scheme
Proceeds from ransomware payments were laundered through cryptocurrency transactions
🕵️
Unknown
Federal indictment
Charged in U.S. District Court for the Northern District of Texas with conspiracy to commit fraud, intentional damage to protected computers, and money laundering conspiracy
Key Locations
Interactive map showing important locations related to this case
Case Information
Incident:Invalid Date
Last Updated:September 10, 2026
Leave a comment
Comments
Case Information
Incident:Invalid Date
Last Updated:September 10, 2026