Entity record
Dmitrii Yuryevich KHOROSHEVPerson
Dmitrii Yuryevich KHOROSHEV appears on the UK Sanctions List (UKSL) and 2 other official sanctions lists, designated by US OFAC, UK HM Treasury (OFSI), UK Foreign, Commonwealth & Development Office (FCDO) under programs CYBER2, Cyber, The Cyber (Sanctions) (EU Exit) Regulations 2020; reflected as observed on 2026-07-30.
Also known as
- Dmitriy Yurevich KHOROSHEV
- Dmitry YURIEVICH
- Dmitrii Yuryevich KHOROSHEV
- LOCKBITSUPP
- Dmitriy Yureyvich KHOROSHEV
- Dmitry Yureyvich KHOROSHEV
- Дмитрий Юрьевич Хорошев (Cyrl)
Designations
- Designated by US OFAC under program CYBER2. Other entities under CYBER2
- Designated by UK HM Treasury (OFSI) under program Cyber since . Other entities under Cyber
- Designated by UK Foreign, Commonwealth & Development Office (FCDO) under program The Cyber (Sanctions) (EU Exit) Regulations 2020 since . Other entities under The Cyber (Sanctions) (EU Exit) Regulations 2020
Reason for listing
Per UK Foreign, Commonwealth & Development Office (FCDO) (listed ):
UKSL CYB0047 — Measures: Asset freeze, Travel Ban, Director Disqualification Sanction — Dmitry Yureyvich KHOROSHEV is or has been involved in relevant cyber activity in that he has been responsible for, engaged in, provided support for or promoted the commission, planning or preparation of relevant cyber activity, or provided technical assistance that could contribute to relevant cyber activity. In particular, KHOROSHEV has been the primary user of the online moniker and public facing identity LockBitSupp. We assess that KHOROSHEV is a senior leader of the LockBit ransomware group and was centrally involved in the administration, its infrastructure and operations. KHOROSHEV, has been a significant direct financial beneficiary of LockBit ransomware activity. LockBit are responsible for ransomware attacks against thousands of victims around the world, including in the UK, which have been estimated to result in billions of dollars of losses globally, impacting businesses and the livelihoods of ordinary citizens. LockBit has conducted or enabled malicious ransomware campaigns against a range of targets, involving actual or attempted unauthorised access to and interference with information systems and data, activities which undermined or were intended to undermine the integrity, prosperity or security of the United Kingdom or a country other than the United Kingdom, or directly or indirectly caused or were intended to cause economic loss to or prejudice to the commercial interests of those affected by the activity. (official source)
Per UK HM Treasury (OFSI) (listed ):
CYB0047 — Dmitry Yureyvich KHOROSHEV is or has been involved in relevant cyber activity in that he has been responsible for, engaged in, provided support for or promoted the commission, planning or preparation of relevant cyber activity, or provided technical assistance that could contribute to relevant cyber activity. In particular, KHOROSHEV has been the primary user of the online moniker and public facing identity LockBitSupp. We assess that KHOROSHEV is a senior leader of the LockBit ransomware group and was centrally involved in the administration, its infrastructure and operations. KHOROSHEV, has been a significant direct financial beneficiary of LockBit ransomware activity. LockBit are responsible for ransomware attacks against thousands of victims around the world, including in the UK, which have been estimated to result in billions of dollars of losses globally, impacting businesses and the livelihoods of ordinary citizens. LockBit has conducted or enabled malicious ransomware campaigns against a range of targets, involving actual or attempted unauthorised access to and interference with information systems and data, activities which undermined or were intended to undermine the integrity, prosperity or security of the United Kingdom or a country other than the United Kingdom, or directly or indirectly caused or were intended to cause economic loss to or prejudice to the commercial interests of those affected by the activity. (official source)
Key properties
- Date of birth
- Place of birth
- Russian Federation
- Nationality
- Russia
- Citizenship
- Russia
- Gender
- male
Identifiers
- Tax ID No.
- 366110340670 · Russia
- Passport
- 2018278055 · Russia
- Passport
- 2006801524 · Russia
- Email Address
- khoroshev1@icloud.com
- Email Address
- sitedev5@yandex.ru
- Gender
- Male
- Digital Currency Address - XBT
- bc1qvhnfknw852ephxyc5hm4q520zmvf9maphetc9z
- Secondary sanctions risk:
- Ukraine-/Russia-Related Sanctions Regulations, 31 CFR 589.201
- OFSI Group ID
- 16494
- UK Sanctions List Unique ID
- CYB0047
Addresses
RussiaSource list & list version
| Source list | List version | Manifest SHA-256 | Status | Verify |
|---|---|---|---|---|
| UK Sanctions List (UKSL)Sanctions list UK Foreign, Commonwealth & Development Office (FCDO) | gb_fcdo_uksl@2026-08-04 | 6f5e8b8ed92cccf0… | List version (signing pending) | — |
| UK OFSI Consolidated List of Financial Sanctions TargetsSanctions list UK HM Treasury — Office of Financial Sanctions Implementation (OFSI) | 20260610-001 | 4d14d0d8a5584fff… | List version (signing pending) | manifest |
| OFAC Specially Designated Nationals (SDN) ListSanctions list US Department of the Treasury, Office of Foreign Assets Control | 20260613-001 | dbfaf0c020d646a9… | List version (signing pending) | manifest |
About these sources
The UK Sanctions List (UKSL), published by the Foreign, Commonwealth & Development Office — since 28 January 2026 the single, current source for all UK sanctions designations (financial, immigration, trade and transport measures), superseding the older OFSI Consolidated List.
What a match means: A match is a current, binding UK sanctions designation — treat as a direct compliance hit and escalate immediately.
The UK's former OFSI Consolidated List of Financial Sanctions Targets, maintained by HM Treasury. OFSI closed this list on 28 January 2026 — current UK sanctions designations now publish only to the FCDO UK Sanctions List (also in this catalog) — and it is retained here as a historical source.
What a match means: A match reflects a UK financial-sanctions designation recorded before the 28 Jan 2026 cutover; check whether the same party also appears on the current UK Sanctions List, and treat either appearance as a genuine UK sanctions hit, not a stale false positive.
The US Treasury's Office of Foreign Assets Control (OFAC) Specially Designated Nationals and Blocked Persons List — the United States' primary sanctions list, naming persons, companies, vessels and aircraft whose property is blocked under US sanctions authorities (IEEPA, TWEA, the Kingpin Act, Global Magnitsky, and program-specific executive orders).
What a match means: A match is a direct US sanctions hit — the named party is designated and, absent a license, US persons are generally barred from dealing with them; escalate immediately rather than clearing the alert yourself.
First observed ; last confirmed present in UK Sanctions List (UKSL) list version gb_fcdo_uksl@2026-08-04, observed .
This page reflects the official UK Sanctions List (UKSL), version gb_fcdo_uksl@2026-08-04, as observed on 2026-07-30. ProofAML is not the issuing authority.
Request a correction or dispute (distinguishes a data-handling error on our side from the underlying official designation, which is the issuing authority's record).
How to cite this page
Dmitrii Yuryevich KHOROSHEV. ProofAML. This page reflects the official UK Sanctions List (UKSL), version gb_fcdo_uksl@2026-08-04, as observed on 2026-07-30. ProofAML is not the issuing authority. URL: https://proofaml.com/people/dmitrii-yuryevich-khoroshev-nk51c5ad3f/
Machine-readable export (FTM + lineage): /data/entities/51.json (record key nk51c5ad3f)