Back Mezha Russian hacker pleaded guilty to hacking oil and gas infrastructure | Ukraine news - #Mezha
A plea agreement may reveal transnational ties between a suspected Russian hacking crew and critical energy targets, raising questions industrial security and geopolitical intent.
As the publication reports «Agency» .
Russian citizen Artem Revenensky, arrested in the United States on charges of involvement in breaches of critically important oil-and-gas infrastructure systems in several countries, including the United States and Ukraine, worked from 2021 to 2023 as a lead specialist in Russia’s special economic zone “Alabuga” in Tatarstan, where after the start of the large-scale invasion of Ukraine the production of the Russian version of the Iranian drones “Shahed” began.
According to investigators, during the period described in the case materials, Revenensky was closely linked to cyber activity and hacked systems in various countries. On April 30 it was reported that the Russian had entered into a plea agreement in exchange for a lighter sentence.
Artem Revenensky, known in the cybercrime community under the nickname Digit, was in early April indicted by the U.S. federal prosecutors in cases involving conspiracy to cause damage to protected computer systems, wire fraud, and theft of personal data.
According to the indictment, he was a member of the hacker group Sector16, linked to the Russian authorities, and took part in operations accessing oil and gas infrastructure systems in the United States, Ukraine, Germany, France, and Latvia.
Specifically, in January 2025, it is alleged, Sector16 gained control over oil pumps and storage tanks at one facility in Texas. Other facilities in various states were also breached.
In the case materials highlighting the charges, there are also references to plans for sabotage against critical infrastructure in Ukraine, and Revenensky allegedly told one of his accomplices that he expected to receive 5 million rubles for cutting electricity across Ukraine for three days.
The hackers also gained access to a gas infrastructure facility in Poltava and discussed how this could be used to cause physical damage.
According to the Agency, citing leaks, no later than 2021 Revenensky began working in Alabuga and by 2023 held the position of lead specialist in the analytics module of the Special Projects Service. There is no information whether he continued to work in Alabuga in the following years.
In November 2025 he was taken into custody in the United States, with the arrest reportedly taking place in the Dominican Republic according to his lawyer. There were no public from Revenensky himself.
The case highlights the perpetrators’ deliberate actions and their commitment to a path of causing significant damage to critical infrastructure. The investigation spans several jurisdictions and highlights the deep links between cyber activity and geopolitics.
At the moment there are no public from the accused himself, but the case continues to be considered by U.S. federal authorities. Revenensky faces charges under U.S. law, and the consequences could be severe.
This case illustrates how cyberattacks can be intertwined with geopolitical interests and how countries respond to threats across shared and multi-layered jurisdictions.
You might be interested in:
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
