Russian Basketball Star Daniil Kasatkin Arrested Amid Ransomware Negotiation Allegations

• Russian basketball player Daniil Kasatkin was detained in France at the request of the U.S. authorities.
• Kasatkin stands accused of being a ransom negotiator for a prominent threat actor, which he denies.
• The name of the ransomware gang was not disclosed, but reports say it orchestrated over 900 breaches.

Russian professional basketball player Daniil Kasatkin has been arrested in France at the request of the United States, where he faces allegations of involvement in a massive ransomware hacking ring. 

Kasatkin, 26, was detained at Paris’ Charles de Gaulle Airport on June 21, 2025, while traveling with his fiancée, AFP and Le Monde reported.

U.S. authorities have accused him of orchestrating payment negotiations for a ransomware group that allegedly infiltrated the systems of approximately 900 companies and two federal institutions between 2020 and 2022. 

These attacks reportedly demanded hefty ransoms to stop operations and decrypt impacted systems.  

Kasatkin’s lawyer, Frederic Belot, told the AFP that his client “bought a used computer” and fell victim to deceitful circumstances, insisting the charges lack substantial proof. However, the U.S. is leveraging evidence allegedly tying Kasatkin to transactions and communications associated with the hacking activities.  

While Kasatkin denies these accusations, claiming to have no technological expertise, prosecutors contend that his role was integral to facilitating the extortion attempts. 

French courts have denied his bail request, leaving him in custody as legal proceedings continue. Extradition to the U.S. remains a potential outcome, pending court deliberations. 

The case of Daniil Kasatkin adds to the list of recent charges made in connection with involvement in cybercriminal activity, with the most recent being the arrest of a youngster for the massive breach targeting Pedro Sánchez and the arrest of four Russian nationals suspected of deploying Phobos ransomware.