Kanishka and Mark Hosenball

(Reuters) – According to U.S. Justice Department filings Monday, a Russian and Ukrainian national have been charged over a ransomware attack that took place in July on an American company. CNN reports that $6 million was seized by the United States.

Yaroslav Vasinskyi from Ukraine was detained in Poland last month. He is accused of using ransomware, known as REvil. It has been used in hacks which have cost U.S. companies millions of dollar, according to a court filing.

According to U.S. District Court of the Northern District of Texas, Vasinskyi carried out a ransomware operation on Kaseya’s Florida-based software company Kaseya over the July Fourth weekend. The attack infected as many as 1,500 companies around the globe.

The United States charged Vasinskyi with conspiracy to defraud and money laundering among others.

According to the Treasury Department, the two operatives are also subject to sanctions due their involvement in ransomware attacks in the United States. They will also be facing sanctions over Chatex virtual currency exchange “for facilitating financial transactions for ransomware actors.”

Treasury stated that the ransom payments received by these two men were more than $200,000,000 in Monero, and Monero. Additionally, it stated that Estonian and Latvian government agencies played vital roles in the investigation.

Vasinskyi (22) was currently being held in Poland, pending U.S. Extradition Proceedings, while Polyanin (28), remained at large.

Indictment by the U.S. against the Ukrainian hacker stated that he, along with other conspirators, began deploying hacking tools around April 2019, and then “regularly” upgraded and refined them. According to the indictment, the hacker was also charged with laundering funds obtained via a hacking scheme.

Europol stated earlier Monday that two Romanian officials had arrested them for allegedly launching the REvil ransomware. Europol also stated that since February law enforcement officials have taken into custody three additional REvil associates.

Europol announced Friday that twelve suspects who are suspected of having launched ransomware attacks against infrastructure or companies in 71 nations were “targeted.”