Threat Intelligence & APT The Record 1 month ago

Three Ukrainians to face charges for alleged hack of 610,000 Roblox accounts

CN
CyberNew Threat Research Desk
• Original Reporting: The Record
CyberNew Threat Intel Assessment
Assessed Severity: CRITICAL
Impacted Surface
Enterprise Data & Identity Stores
Intelligence Sector
Threat Intelligence & APT

Analyst Takeaway

"Three Ukrainians to face charges for alleged hack of 610,000 Roblox accounts Three Ukrainians are set to stand trial for allegedly stealing access to more than 610,000 Roblox accounts and selling them to buyers in Russia, according to Ukrainian law enforcement. Prosecutors in Ukraine’s western Lviv region said Tuesday that from May 2025 until April 2026 the group stole digital credentials that..."

Recommended Defense & Mitigation

  • Emergency Patching: Prioritize vendor patches and CVE mitigation across internet-facing assets immediately.
  • Perimeter Audit: Inspect perimeter firewall logs and hunt for unauthorized RCE indicators.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
Roblox

Three Ukrainians to face charges for alleged hack of 610,000 Roblox accounts

Three Ukrainians are set to stand trial for allegedly stealing access to more than 610,000 Roblox accounts and selling them to buyers in Russia, according to Ukrainian law enforcement.

Prosecutors in Ukraine’s western Lviv region said Tuesday that from May 2025 until April 2026 the group stole digital credentials that allowed them to access accounts without knowing users’ passwords. They then used software to determine which accounts contained valuable virtual currency, rare items or other digital assets that could fetch higher prices on the resale market.

Roblox is an online gaming and social platform particularly popular with children and teenagers, where users can play games largely created by other players, build avatars and buy virtual items using the platform’s currency.

According to prosecutors, a 19-year-old man from the city of Drohobych organized the operation and recruited two 22-year-old associates.

Ukrainian authorities first announced the case in April, when police said they had identified the alleged organizer and were investigating the full scale of the operation.

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from The Record.

Primary Advisory →