Mikhail Vasiliev pleaded guilty to multiple counts of extortion, unauthorized use of a computer to commit mischief to data (related to LockBit ransomware attacks), and possession of prohibited firearms.
He deployed ransomware against three Canadian companies, causing significant financial losses and operational disruptions, totaling approximately $900,000 in damages and remediation costs.
The court considered aggravating factors such as the planned and deliberate nature of the cybercrimes, the motivation of personal gain, the substantial harm to victims, and the possession of loaded firearms.
Mitigating factors included his guilty plea, early resolution efforts, consent to extradition to the U.S. for related charges, anticipated restitution, and being a first offender.
The judge imposed a global sentence of four years and six months imprisonment, emphasizing denunciation and general deterrence for cybercrime.