Skip to content

Probe conducted by the Verden Public Prosecutor's Office and the Lower Saxony State Criminal Police Office (LKA) leads to a successful outcome.

Collaborative Success: State Criminal Office of Lower Saxony in Hannover, along with unspecified partners, achieve their objectives - More Details Here

Probe conducted jointly by the Verden Public Prosecutor's Office and the Lower Saxony State...
Probe conducted jointly by the Verden Public Prosecutor's Office and the Lower Saxony State Criminal Police Office results in a successful determination

Probe conducted by the Verden Public Prosecutor's Office and the Lower Saxony State Criminal Police Office (LKA) leads to a successful outcome.

The Landeskriminalamt Niedersachsen (LKA Lower Saxony) has announced a significant development in the fight against cybercrime. On July 24, 2025, the State Criminal Investigation Office of Lower Saxony, in collaboration with various international partner agencies and the public prosecutor's office in Verden, successfully seized the technical infrastructure of the notorious ransomware group, Blacksuit/Royal Caribbean.

First Chief Inspector Frank Puschin, head of investigations in cybercrime at LKA Lower Saxony, will be available for media interviews on July 29, 2025, at 12:30 PM. The interview will take place at Waterlooplatz 11, 30169 Hannover. Media are asked to arrive early for the interview, and registration is required for access to the building, with personal data to be provided at the reception.

Blacksuit/Royal Caribbean is known for using a method called double extortion, where they encrypt data and steal it before encrypting it. This tactic has resulted in 184 victims worldwide, including some in Germany, registering with authorities. Even if victims have backups and can restore their data, Blacksuit/Royal Caribbean still has a copy and threatens to publish or sell it.

The damage caused by Blacksuit/Royal Caribbean was over 500 million US dollars in August 2024, with further extortions having occurred since then. By shutting down the servers, the communication, distribution of the malware, and the leak site of Blacksuit/Royal Caribbean have been prevented.

This operation against the Blacksuit/Royal Caribbean ransomware group involved authorities from Germany, the Netherlands, France, the United States, and the United Kingdom, as well as operatives from Europol, Eurojust, and private cybersecurity firms. The seizure was carried out in cooperation with international partners such as Homeland Security and Europol.

Victims of Blacksuit/Royal Caribbean attacks are encouraged to report incidents to authorities. For media inquiries, contact Rebecca Kolm from the Press and Public Relations department of LKA Lower Saxony. Contact information for Rebecca Kolm includes a telephone number, email address, and website.

Cooperation with authorities is crucial to prevent future crimes and support the ongoing investigation. This significant blow dealt to Blacksuit/Royal Caribbean is a testament to the collective efforts of international agencies in the fight against cybercrime. The information for this article was originally transmitted by news aktuell.

Read also:

Latest