How Hackers Stole and Sold Roblox Accounts for $250,000 Before Getting Caught

Ukrainian authorities have arrested a hacker group in the Lviv Oblast that’s been accused of stealing and selling Roblox accounts, and making $250,000 in profit.

The suspects allegedly used stolen session data to gain unauthorized access to user accounts, targeting profiles with valuable in-game currency and digital items. Investigators have also said the group operated for several months, checking hundreds of thousands of accounts before selling access to the most profitable ones online.

Key takeaways

• Ukrainian authorities detained a hacker group operating in Lviv Oblast
• The suspects targeted Roblox accounts and sold them online
• Investigators estimate profits of nearly $250,000
• Attackers used stolen session cookies to bypass account credentials

Ukrainian authorities break up Roblox account theft ring

Ukrainian law enforcement has dismantled a cybercrime group accused of stealing and selling access to gaming accounts, mainly targeting Roblox users.

Prosecutors in the Lviv region, working with cyber police and the Security Service of Ukraine, say that the group gained unauthorized access to gamers' profiles and monetized them through online sales.

Many of the compromised accounts contained virtual currency or rare in-game items, increasing their resale value.

Attackers used stolen session data to access accounts

According to the investigations, the group relied on stolen cookies, which is basically data that keeps users logged into online services and that allows the attackers to bypass login credentials.

After gaining entry, they used automated tools to verify whether accounts were active and to assess their contents. The group focused on accounts with valuable digital assets, including accumulated in-game currency and rare items.

More than 600,000 accounts checked

The investigation revealed the scale of the operation, and the numbers are staggering. Between October 2025 and January 2026, the group checked more than 610,000 accounts to identify those with the highest value.

“They selected those that contained the most valuable digital resources. During investigative actions, law enforcement discovered 357 files with such accounts. Subsequently, these files were sold on Russian resources, with payment made to a cryptocurrency wallet,” said the investigators.

Authorities discovered hundreds of files containing stolen account data. The suspects allegedly sold access to select accounts on Russian online platforms, with payments made through cryptocurrency wallets.

Prosecutors estimate the group generated nearly $250,000 in profit during the scheme.

Searches lead to seizures and charges

Law enforcement carried out 10 searches at locations linked to the suspects. During the raids, authorities seized computer equipment, storage devices, mobile phones, bank cards, and cash, including several thousand euros and tens of thousands of US dollars.

Investigators identified a 19-year-old resident of Drohobych as the alleged organizer, assisted by two individuals, aged 21 and 22.

Prosecutors have notified the suspects of charges, including theft committed by a group and unauthorized interference with information systems that resulted in data leakage.

Roblox accounts targeted for their value

Roblox accounts often carry both gaming and financial value due to accumulated resources and purchased items, investigators say.

This makes them attractive targets for cybercriminals seeking to profit from unauthorized access and resale.