Three Arrested for Hacking Over 610,000 Roblox Accounts in Ukraine-Led Operation
Ukrainian authorities arrested three individuals for hacking over 610,000 Roblox accounts using infostealer malware distributed via social engineering lures promising in-game bonuses.
Ukrainian police have arrested three individuals suspected of hacking over 610,000 Roblox accounts in a scheme that netted more than $225,000. The arrests, announced by the Prosecutor General's Office of Ukraine, involved a 19-year-old from Drohobych and two others aged 21 and 22. The operation targeted the popular online gaming platform Roblox, which has millions of active users worldwide.
Between October 2025 and January 2026, the attackers used social engineering lures that promised in-game bonuses to distribute infostealer malware. The malware stole usernames, passwords, and session tokens, giving the hackers access to victims' accounts. Once inside, they checked the value of in-game items and Robux, Roblox's virtual currency, which can be purchased with real money through gift cards costing up to $199.99.
The hackers identified at least 357 high-value elite accounts, which they sold on Russian websites in exchange for cryptocurrency. Some rare in-game items on Roblox are traded for thousands of dollars on third-party exchanges, making access to elite accounts extremely lucrative. Authorities believe the group made over $225,000 from selling these accounts.
Working with the cyber police and the Security Service of Ukraine, prosecutors in the Lviv region conducted searches at 10 properties associated with the suspects. The searches resulted in the seizure of computer equipment, storage devices, mobile phones, bank cards, handwritten notes, and over €2,500 and nearly $35,000 in cash. The investigation is ongoing, and analysis of the seized devices is underway.
If found guilty of distributing malware and stealing accounts, the defendants face up to 15 years in prison. The case highlights the growing threat of cybercrime targeting online gaming platforms, where virtual items and currencies have real-world value. Roblox has not yet commented on the incident.
This operation underscores the importance of international cooperation in combating cybercrime. The Ukrainian authorities worked closely with the cyber police and the Security Service of Ukraine to dismantle the hacking ring. The arrests serve as a warning to cybercriminals that law enforcement agencies are increasingly capable of tracking and prosecuting such crimes.
As online gaming continues to grow in popularity, so does the risk of account theft and fraud. Players are advised to use strong, unique passwords, enable two-factor authentication, and be cautious of unsolicited offers promising in-game bonuses. The Roblox hacking case is a stark reminder that cybercriminals are constantly evolving their tactics to exploit vulnerabilities in digital ecosystems.