Eurojust
EU agency that coordinates cross-border criminal prosecutions.
Eurojust supported Operation KillSwitch, in which police captured KillSec's extortion website on 30 September 2026 and recovered more than 110 TB of victims' data.
Last refreshed: 12 October 2026 · Appears in 1 active topic
How did European prosecutors help take down a ransomware gang led by a teenager?
Timeline for Eurojust
Supported the KillSwitch operation
Cybersecurity: Threats and Defences: Police seize KillSec ransomware leak siteBackground
Eurojust is the EU's agency for judicial cooperation in criminal matters, formally the EU Agency for Criminal Justice Cooperation, based in The Hague. It helps national prosecutors share information, agree prosecution strategies and run joint actions across borders.
In Operation KillSwitch, Eurojust backed Hamburg's State Criminal Police Office and Europol as they captured KillSec's extortion website on 30 September 2026. Officers took five of the gang's main servers and recovered more than 110 TB of data stolen from victims. The operation made three provisional arrests and searched eight homes in Greece, Romania, Spain and the UK, with ten countries taking part. Investigators link KillSec, active since about 2024, to around 1,000 suspected attacks, about 500 of them successful.
Ransomware gangs work across borders, so a takedown needs prosecutors in several countries to act together. Eurojust's role is to make that legal side work alongside Europol's police coordination.
