Summary
Ardit Kutleshi, 28, a Kosovar national, pleaded guilty to charges related to his creation and operation of Rydox, an online marketplace used by cybercriminals to buy and sell stolen personal information, access devices, and cybercrime tools.
According to the U.S. Department of Justice, Rydox conducted more than 7,600 transactions involving stolen PII (personally identifiable information), stolen access devices, means of identification, and cybercrime tools and services since at least 2016.
The marketplace generated at least $232,000 in revenue, according to court documents. Kutleshi pleaded guilty to aggravated identity theft and money laundering conspiracy and is scheduled to be sentenced on Feb. 9, 2027.
Key details of the case
| Detail | Information |
|---|---|
| Defendant | Ardit Kutleshi |
| Age | 28 |
| Nationality | Kosovar |
| Marketplace | Rydox |
| Activity | Sale of stolen PII, access devices and cybercrime tools |
| Transactions | More than 7,600 |
| Revenue | At least $232,000 |
| Guilty pleas | Aggravated identity theft and money laundering conspiracy |
| Arrest | December 2024 in Kosovo |
| Extradition | 2025 |
| Domain seized | Rydox.cc |
| Sentencing | Feb. 9, 2027 |
| Investigation | FBI Pittsburgh Field Office and international partners |
Rydox sold stolen information and cybercrime tools
According to court documents, Rydox operated as an online marketplace where cybercriminals could purchase stolen personal information and other products used to facilitate cybercrime.
Since at least 2016, the marketplace processed more than 7,600 transactions involving stolen PII, stolen access devices, means of identification, and cybercrime tools and services.
The DOJ said the stolen information included data belonging to victims in the United States. The marketplace generated at least $232,000 in revenue from these transactions.
Kutleshi and his brother operated the marketplace
The DOJ said Kutleshi and his brother, Jetmir Kutleshi, operated Rydox.
Jetmir Kutleshi previously pleaded guilty and was sentenced in December 2025 before being deported to Kosovo, according to the Justice Department.
Prosecutors said the brothers profited from the marketplace by facilitating the sale of stolen identities, personal information, and tools used for online crimes.
US seized Rydox domain
In December 2024, the United States judicially seized the Rydox.cc domain.
The seizure prevented the marketplace’s operators and other parties from continuing to use the website to buy and sell cybercrime tools and stolen personal identifying information belonging to U.S. citizens.
Kutleshi was arrested by Kosovo law enforcement in December 2024 and later extradited from Kosovo to the United States in 2025.
Australia backs EU sanctions targeting cyber attacks linked to Chinese and Iranian entities
The case demonstrates the international nature of investigations involving online criminal marketplaces, with investigators working across multiple jurisdictions to identify operators and disrupt their infrastructure.
International investigation involved multiple agencies
The FBI’s Pittsburgh Field Office investigated the case with international partners, including:
- Kosovo State Prosecutor’s Special Prosecution Office
- Kosovo Police Cybercrime Investigation Directorate
- Albanian Special Anti-Corruption Body (SPAK)
- Royal Malaysia Police Commercial Crime Investigation Department
- Attorney General’s Chambers of Malaysia
The Justice Department’s Office of International Affairs also assisted with the investigation and extradition process.
Senior Counsel Thomas Dougherty of the Justice Department’s Criminal Division Computer Crime and Intellectual Property Section (CCIPS) and Assistant U.S. Attorney Nicole Stockey for the Western District of Pennsylvania are prosecuting the case.
Kutleshi faces up to 20 years for money laundering conspiracy
Kutleshi pleaded guilty in the U.S. District Court for the Western District of Pennsylvania to aggravated identity theft and money laundering conspiracy.
The aggravated identity theft charge carries a mandatory minimum sentence of two years in prison. The money laundering conspiracy charge carries a maximum penalty of 20 years in prison.
Kutleshi is scheduled to be sentenced on Feb. 9, 2027. The final sentence will be determined by a federal district court judge after consideration of the U.S. Sentencing Guidelines and other statutory factors.
DOJ highlights cybercrime enforcement
Assistant Attorney General A. Tysen Duva of the Justice Department’s Criminal Division said Kutleshi’s guilty plea demonstrates the department’s efforts to pursue cybercriminals through international cooperation and technical expertise.
FBI (Federal Bureau of Investigation) Cyber Division Assistant Director Brett Leatherman said Rydox offered cybercriminal tools and sensitive information, including stolen identities and login credentials.
The DOJ’s Computer Crime and Intellectual Property Section investigates and prosecutes cybercrime and intellectual property offenses in coordination with domestic and international law enforcement agencies.
According to the DOJ, since 2020, CCIPS has secured convictions of more than 180 cyber and intellectual property criminals and obtained court orders for the return of more than $350 million in victim funds.
To read the original order please visit DOJ (Department of Justice) website