Readout of the Justice Department Hosting the First Day of the 2023 International Counter Ransomware Initiative Summit

Yesterday, the White House hosted representatives from nearly 50 countries for the first day of the third annual International Counter Ransomware Initiative Summit at the Justice Department. The Summit is the largest international partnership dedicated to disrupting the broader ecosystem that fuels ransomware attacks.

In his opening remarks kicking off the Summit, Attorney General Merrick B. Garland underscored the strength and successes of international partnerships in disrupting ransomware threats as well as mitigating broader cybersecurity risks. The Attorney General discussed the efforts of the Justice Department and its international partners to dismantle and disrupt an international ransomware network known as the “Hive,” responsible for extorting and attempting to extort hundreds of millions of dollars from victims in the United States and around the world. The Attorney General also noted that in the wake of the Oct. 7th attacks in Israel, he directed the Justice Department to offer assistance to Israeli investigators and law enforcement partners to help “identify, investigate, and disrupt financial flows and other material support to Hamas – including in the form of cryptocurrency.” The delegation from Israel was able to join the Summit virtually.

Deputy Attorney General Lisa O. Monaco discussed the Department’s support for its Israeli partners and all of the international partnerships showcased at the Summit, stressing that these cross-border relationships are some of the most powerful tools the Justice Department has to disrupt the ransomware ecosystem and prevent attacks before they happen. She highlighted how these partnerships have led to synchronized and coordinated international operations that have imposed serious costs and consequences for malicious ransomware actors.  In the past year, these operations have included the takedown of two of the largest online criminal marketplaces – BreachForums and Genesis Market – within two weeks of each other as well as the dismantlement of several cryptocurrency mixers and exchanges responsible for the laundering of millions of dollars in ransomware proceeds.

The Summit continues through today, with members discussing areas for further coordination against increasingly sophisticated ransomware attacks.