Belgrade prosecutors detain two suspects for high-tech cybercrime

cybercrime ransomware hacking arrest data breach Belgrade

The High Public Prosecutor's Office in Belgrade has detained two individuals in connection with high-tech criminal activities.

L. D. has been detained for up to 48 hours on suspicion of unauthorized access to protected computer networks and computer sabotage. Between April and August 2026, L. D. allegedly breached the networks of the Football Association of Serbia and the Republic Health Insurance Fund. The suspect is accused of stealing large amounts of data and attempting to extort ransom through ransomware attacks designed to disrupt electronic data processing.

Separately, N. M. S. was detained for up to 48 hours for allegedly possessing phishing tools, computer codes, and data intended for unauthorized access to various computer systems, including banks, between January and August 2026. Authorities stated that the arrest prevented potential attacks targeting the payment cards of both Serbian and foreign citizens.

Entities

Football Association of Serbia · High Public Prosecutor's Office in Belgrade · Higher Public Prosecutor's Office in Belgrade · L. D. · N. M. S. · Republic Health Insurance Fund

Claims

What the coverage asserts, and how many sources carry each claim.

[● 2 SOURCES] N. M. S. allegedly possessed phishing tools and data intended for unauthorized access to computer systems, including banks, between January and August 2026. nova.rs
[● 4 SOURCES] L. D. was detained for up to 48 hours on suspicion of unauthorized access to protected computers and computer sabotage. nova.rs · sputnikportal.rs · www.danas.rs
[● 4 SOURCES] L. D. allegedly accessed the networks of the Football Association of Serbia and the Republic Health Insurance Fund to steal data between April and August 2026. nova.rs · sputnikportal.rs · www.danas.rs
[● 2 SOURCES] N. M. S. was detained for up to 48 hours. nova.rs
[● 2 SOURCES] The suspect allegedly used a ransomware attack to demand ransom for the stolen data. sputnikportal.rs · www.danas.rs
[○ 1 SOURCE] L. D. is suspected of committing four counts of unauthorized access to protected computers and four counts of computer sabotage. www.danas.rs