CyberNews
← Back to dashboard
RANSOMWARE BleepingComputer Ransomware

Police dismantle KillSec ransomware gang allegedly led by 16-year-old

Oct 1, 2026, 02:25 PM · by BleepingComputer

An international law enforcement operation dubbed “Operation KillSwitch” seized the KillSec ransomware gang’s data leak site and servers, led to three arrests, and identified a 16-year-old as the group’s alleged administrator.

The coordinated law enforcement action was carried out on September 30, involving authorities from Belgium, the United States, Finland, Germany, Greece, the Netherlands, Romania, Spain, Switzerland, and the United Kingdom.

Europol and Eurojust also took part in the investigation, along with cybersecurity companies Bitdefender and Group-IB.

"The action was part of Operation KillSwitch, an international investigation led by German authorities into around 1,000 suspected attacks worldwide," says Europol.

"Investigators identified a 16-year-old as the group’s suspected main operator. Three suspects were provisionally arrested and eight properties searched in Greece, Romania, Spain, and the United Kingdom. Authorities also targeted the group’s criminal proceeds."

Source: BleepingComputer