CYBER DELTA FORCESearch

Three Ukrainians to face charges for alleged hack of 610,000 Roblox accounts

Three Ukrainians are set to stand trial for allegedly stealing access to more than 610,000 Roblox accounts and selling them to buyers in Russia, authorities said.

CDF News DeskThe Record16 Sept 2026, 8:00 pm
Image courtesy of The Record. Original report
CDF REPORT

Three Ukrainians are set to stand trial for allegedly stealing access to more than 610,000 Roblox accounts and selling them to buyers in Russia, authorities said.

Prosecutors in Ukraine’s western Lviv region said Tuesday that from May 2025 until April 2026 the group stole digital credentials that allowed them to access accounts without knowing users’ passwords.

They then used software to determine which accounts contained valuable virtual currency, rare items or other digital assets that could fetch higher prices on the resale market.

Roblox is an online gaming and social platform particularly popular with children and teenagers, where users can play games largely created by other players, build avatars and buy virtual items using the platform’s currency.

Prosecutors estimate that selling the compromised accounts could have generated roughly $480,000.

When a token worked, the program assessed what was inside the corresponding Roblox account, including virtual currency and rare in-game items.

Ukrainian authorities first announced the case in April, when police said they had identified the alleged organizer and were investigating the full scale of the operation.

Some accounts were sold for around 70 Russian rubles ($.80) each, according to investigators.

Investigators said they traced nearly $54,000 in cryptocurrency proceeds that had been converted into Ukrainian currency and transferred to the suspects’ bank accounts.

All three suspects are in custody and face charges including theft, money laundering, unauthorized interference with computer systems and the illegal sale of restricted information.

What you need to know

Prosecutors estimate that selling the compromised accounts could have generated roughly $480,000.

What security teams should do

Investigators said they traced nearly $54,000 in cryptocurrency proceeds that had been converted into Ukrainian currency and transferred to the suspects’ bank accounts.

All three suspects are in custody and face charges including theft, money laundering, unauthorized interference with computer systems and the illegal sale of restricted information.

MORE IN THREAT RESEARCH

More cybersecurity reporting

Who’s Tracking You? Use This New Service to Find OutKrebsOnSecurity · 14 Aug 2026, 4:54 pmRead This Before You Buy That TV Streaming StickKrebsOnSecurity · 30 Jul 2026, 10:19 pm