# German arrest of Qilin ransomware group member

> Live situation record from CLSTR: https://clstr.news/situations/german-arrest-of-qilin-ransomware-group-member
> Updated: 2026-10-08T08:06:14.000Z. Sources: 25. Developments: 2.

German authorities in North Rhine-Westphalia have arrested and extradited a key member of the Russian ransomware group Qilin. The suspect, a 28-year-old Russian national known by the pseudonym ‘Snake’, was apprehended in Osaka, Japan, while on vacation in May and extradited to Germany last Friday.

The arrest is the result of ‘Operation Albus,’ a months-long investigation involving the State Criminal Police Office and the Central and Contact Point for Cybercrime (ZAC). Investigators believe the suspect was responsible for building the group’s attack infrastructure. The operation involved extensive international cooperation between German investigators and Japanese authorities, including the National Police Agency and the Tokyo High Public Prosecutors Office.

Qilin is identified as a highly active cybercriminal organization that has targeted nearly 4,000 companies globally since 2024, with ransom demands totaling approximately $3 billion. In Germany, the group has targeted 150 entities, including 30 in North Rhine-Westphalia. Interior Minister Herbert Reul described the arrest as the most significant blow to German investigators in the fight against cybercrime to date.

## Claims

- The Qilin group has targeted nearly 4,000 companies and institutions worldwide since 2024. (corroborated by 5 sources)
- The Qilin hacker group is one of the most dangerous cybercrime gangs globally. (corroborated by 4 sources)
- The arrest represents the most significant success for German investigators in combating cybercrime. (corroborated by 4 sources)
- A 28-year-old Russian national was arrested in Tokyo in May and extradited to Germany last Friday. (corroborated by 4 sources)
- The arrested individual is a suspected leading member of the Qilin hacker group. (corroborated by 4 sources)
- The group has attacked 150 entities in Germany, including 30 in North Rhine-Westphalia. (corroborated by 4 sources)
- Ransom demands from the group have totaled nearly 3 billion US dollars. (corroborated by 4 sources)

## Timeline

### 2026-10-08: Germany arrests suspected Qilin ransomware leader extradited from Japan

A suspected leader of the Qilin ransomware group, a 28-year-old Russian national, has been extradited from Japan to Germany following an international investigation into global cyberattacks.

6 sources. https://clstr.news/cluster/german-authorities-arrest-key-member-of-russian-qilin-hacker-group

### 2026-10-06: Qilin hacker arrested in Japan and extradited to Germany

A 28-year-old Russian member of the Qilin ransomware group was arrested in Tokyo and extradited to Germany following a months-long infiltration operation by German cybercrime investigators.

19 sources. https://clstr.news/cluster/german-authorities-arrest-leading-member-of-russian-qilin-hacking-group

---
Cite as: German arrest of Qilin ransomware group member. CLSTR, https://clstr.news/situations/german-arrest-of-qilin-ransomware-group-member