Kosovar National Pleads Guilty in U.S. Case Over Rydox Cybercrime Marketplace
Published 2026-09-26 · County Crime Watch
Ardit Kutleshi, a 28-year-old Kosovar national, pleaded guilty in the U.S. District Court for the Western District of Pennsylvania to aggravated identity theft and money laundering conspiracy for creating and operating Rydox, an online marketplace that sold stolen personally identifiable information, access devices and tools used to commit cybercrime, the U.S. Department of Justice reported. Court documents and DOJ statements say the site conducted transactions involving victims in the United States.
According to the Justice Department, Rydox operated since at least 2016 and facilitated more than 7,600 transactions, generating at least $232,000 in revenue from sales of stolen PII, access devices and related cybercrime services. Kutleshi is scheduled to be sentenced on Feb. 9, 2027; the aggravated identity theft count carries a mandatory minimum of two years, and the money laundering conspiracy count carries a maximum of 20 years, with the ultimate sentence to be set by a federal judge.
The DOJ said Kutleshi was arrested by Kosovo authorities in December 2024 and extradited to the United States in 2025. The United States judicially seized the domain that hosted Rydox in December 2024, which the DOJ said prevented continued use of the site to traffic stolen U.S. citizen data.
The FBI’s Pittsburgh Field Office led the investigation with international partners including Kosovo and Malaysian authorities and Albania’s anti-corruption body, the DOJ statement said. Prosecutors from the Criminal Division’s Computer Crime and Intellectual Property Section and the U.S. Attorney’s Office for the Western District of Pennsylvania are handling the case.
All individuals accused of a crime are presumed innocent unless proven guilty in court.
Source: U.S. Department of Justice · Agency release: 2026-09-24. Original report by County Crime Watch.