Back English.Kyodonews

Japan hands over Russian ransomware suspect to Germany

English.Kyodonews • October 6, 2026

TOKYO - Japan has handed over to German authorities a detained Russian national suspected of being a key member of the international ransomware group, a source familiar with the matter said Tuesday.

The cybercrime group known as Qilin is alleged to have carried out a cyberattack against Japanese beverage maker Asahi Group Holdings Ltd. in 2025.

The man in his 20s allegedly extorted crypto assets from a German logistics firm in 2024, and German authorities had requested his detention and handover, according to the source.

Of the 149 ransomware-linked cases confirmed in Japan in 2025, Qilin's involvement was suspected in 32, according to the National Police Agency.

In ransomware attacks, hackers block access to data and demand payment to restore it.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Japan Extradites Key Member of Ransomware Group Qilin to Germany A 28-year-old Russian national, linked to the ransomware group Qilin, was detained in Osaka and extradited to Germany on October 2, 2026. He is suspected of extorting $165,000 in Bitcoin from a German logistics company after accessing and encrypting its data in September 2024. Qilin has been active in global ransomware attacks, including a significant incident against Asahi Group Holdings in 2025, which disrupted operations and leaked over 1.5 million personal records. The extradition was facilitated by international cooperation and prior intelligence on the suspect's location. Japanese authorities acted under the Extradition Law after securing a warrant from the Tokyo High Court. Qilin is known for its Ransomware-as-a-Service model, with multiple operational teams executing attacks under core members' direction. 25 sources 39

Extracted Entities

Japan hands over Russian ransomware suspect to Germany

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Countries (2)

MITRE ATT&CK (1)

Ransomware Groups (1)