LEGAL OUTCOMES

Sentencing & Judicial Outcomes

Empirical analysis of criminal penalties, imprisonment lengths, restitution orders, and fugitive statuses across federal computer crime prosecutions.

Key Facts

Avg Sentence
142.3 mo
11.9 years
Sentenced
24
Federal convictions
Total Restitution
$37.6 million
Court ordered
Fugitives
12
Foreign jurisdiction
  • Average federal prison term across sentenced cyber defendants is 142.3 months (11.9 years).
  • 24 defendants have completed sentencing in federal district courts.
  • Over $37.6 million in mandatory restitution and criminal forfeiture ordered.
  • 12 indicted foreign state-sponsored operators remain active fugitives outside United States jurisdiction.

Federal Sentence Duration Distribution

Federal Prison Sentence Lengths for Cyber Defendants Distribution of federal prison terms ordered for defendants in cyberattack prosecutions. 1-3 Years 5 defendants 3-5 Years 0 defendants 5-10 Years 8 defendants 10-20 Years 5 defendants 20+ Years 4 defendants Life Imprisonment 2 defendants
Distribution of federal prison terms ordered for defendants in cyberattack prosecutions.
Federal Prison Sentence Lengths for Cyber Defendants
Sentence Range Number of Defendants
1-3 Years 5 defendants
3-5 Years 0 defendants
5-10 Years 8 defendants
10-20 Years 5 defendants
20+ Years 4 defendants
Life Imprisonment 2 defendants

Longest Imposed Prison Sentences

Defendant Nationality Total Prison Sentence Restitution / Forfeiture Status Associated Cases
Joshua Adam Schulte United States Life imprisonment None ordered sentenced U.S. v. Joshua Schulte (CIA Vault 7 Leak)
Ross William Ulbricht United States Life imprisonment None ordered sentenced U.S. v. Ross Ulbricht (Dread Pirate Roberts / Silk Road)
Roman Valerevich Seleznev Russian Federation 27 years (324 months) None ordered sentenced U.S. v. Roman Seleznev (Track2 Point-of-Sale Carding)
Sebastien Vachon-Desjardins Canada 20 years (240 months) $21.5 million sentenced U.S. v. Vachon-Desjardins (Netwalker Ransomware)
Albert Gonzalez United States 20 years (240 months) None ordered sentenced U.S. v. Albert Gonzalez (TJX & Heartland Payment Systems)
Tyler Barriss United States 20 years (240 months) None ordered sentenced U.S. v. Tyler Barriss (Serial Swatting / Wichita Incident)
Max Ray Vision United States 14 years (168 months) None ordered sentenced U.S. v. Max Ray Vision (Iceman / CardersMarket)
Yaroslav Vasinskyi Ukraine 13 years (156 months) None ordered sentenced U.S. v. Yaroslav Vasinskyi (Kaseya VSA / REvil Ransomware)
Andrei Tyurin Russian Federation 12 years (144 months) None ordered sentenced U.S. v. Andrei Tyurin (JPMorgan Chase Data Breach)
Fedir Hladyr Ukraine 10 years (120 months) None ordered sentenced U.S. v. Hladyr, Kolpakov & Iarmak (FIN7 Cybercrime Syndicate)