[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEK3nz38J1aDBRqW9uOX5Kam6G5Cs3s6QwHvbMUw76D0":3},{"article":4,"iocs":44,"watch_terms":49,"solutions":50,"lesson":53},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"500fcb55-1c03-48ea-b1b1-f8c717b0b36d","Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court","kosovar-owner-of-rydox-marketplace-pleads-guilty-in-us-court-acbe4e","Ardit Kutleshi created and operated Rydox, which allowed miscreants to trade PII and cybercrime tools and services. The post Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court appeared first on SecurityWeek.","Ardit Kutleshi, a Kosovar national, has pleaded guilty in a US court to identity theft and money laundering conspiracy charges for his role in operating the Rydox cybercrime marketplace. The marketplace, which facilitated the trade of stolen PII, payment card data, credentials, and cybercrime tools, was disrupted in December 2024. Servers and approximately $225,000 in cryptocurrency were seized, and the domain www.Rydox.cc was taken down.","Kosovar national Ardit Kutleshi pleads guilty in US court for operating the Rydox cybercrime marketplace.","https:\u002F\u002Fwww.securityweek.com\u002Fkosovar-owner-of-rydox-marketplace-pleads-guilty-in-us-court\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F07\u002Fplead-guilty-hacker-court.jpeg","2026-09-25T12:16:27+00:00","2026-09-25T14:00:15.442879+00:00",8,[17,20],{"name":18,"type":19},"Ardit Kutleshi","threat_actor",{"name":21,"type":22},"Rydox","product","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":23,"icon":25,"name":26,"slug":27},null,"Threat Intelligence","threat-intelligence",[29,34,39],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":35},{"id":36,"icon":25,"name":37,"slug":38},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":40},{"id":41,"icon":25,"name":42,"slug":43},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",[45],{"type":46,"value":47,"context":48},"domain","www.Rydox.cc","Domain for the Rydox cybercrime marketplace",[21],{"controls":51,"vendors":52},[],[],{"slug":54,"title":55,"body":56,"framework_refs":57,"framework_notes":70},"rydox-cybercrime-marketplace-operator-pleads-guilty-to-identity-theft-and-money-laundering","Rydox Cybercrime Marketplace Operator Pleads Guilty to Identity Theft and Money Laundering","The Rydox marketplace operated as an underground hub for trading stolen personally identifiable information (PII), payment card data, credentials, and cybercrime tools — representing a significant failure in the broader ecosystem of data protection and law enforcement response. The root issue is that compromised personal and financial data, likely harvested from breaches at legitimate organizations, found a ready market with minimal friction. This case underscores why organizations must treat data breaches not just as internal IT incidents but as events with cascading criminal consequences for affected individuals. The successful takedown — including server seizures and cryptocurrency forfeiture — demonstrates that international cooperation and financial tracking are critical tools in disrupting cybercrime economies.",[58,59,60,61,62,63,64,65,66,67,68,69],"CIS Control 3 – Data Protection","CIS Control 6 – Access Control Management","CIS Control 17 – Incident Response Management","NIST SP 800-53 AC-2 – Account Management","NIST SP 800-53 SI-12 – Information Management and Retention","NIST SP 800-53 IR-6 – Incident Reporting","GDPR Article 5 – Principles of Data Processing","GDPR Article 33 – Notification of a Personal Data Breach","GDPR Article 25 – Data Protection by Design and by Default","PCI DSS Requirement 3 – Protect Stored Cardholder Data","PCI DSS Requirement 12.10 – Implement an Incident Response Plan","ITIL Service Transition – Information Security Management",{}]