Several members of the Egregor ransomware group were arrested following a joint operation between Ukrainian and French law enforcement. French law enforcement officers made the arrests after they were able to trace ransom payments to group members based in Ukraine.
The investigation on the Egregor attacks was first initiated by the Tribunal de grande instance de Paris after a number of French companies, such as Ouest France, Gefko, and Ubisoft, suffered attacks, and so issued complaints. Those who were arrested by the police were said to be Egregor affiliates who had hacked into corporate networks to deploy ransomware.