Three Ukrainians are set to stand trial for allegedly stealing access to more than 610,000 Roblox accounts and selling them to buyers in Russia, according to Ukrainian law enforcement.

Prosecutors in Ukraine’s western Lviv region said Tuesday that from May 2025 until April 2026 the group stole digital credentials that allowed them to access accounts without knowing users’ passwords. They then used software to determine which accounts contained valuable virtual currency, rare items or other digital assets that could fetch higher prices on the resale market.

Roblox is an online gaming and social platform particularly popular with children and teenagers, where users can play games largely created by other players, build avatars and buy virtual items using the platform’s currency.

According to prosecutors, a 19-year-old man from the city of Drohobych organized the operation and recruited two 22-year-old associates.

Ukrainian authorities first announced the case in April, when police said they had identified the alleged organizer and were investigating the full scale of the operation.

Authorities also said at the time the attackers had distributed information-stealing malware disguised as software offering gaming advantages or free in-game bonuses.

According to Tuesday’s announcement, the group allegedly divided the work among its members, with the organizer assigning tasks, paying for servers, overseeing sales and distributing the proceeds. His associates helped run the website and Telegram channels used to advertise the stolen accounts, communicated with buyers and handled the money.

At the heart of the operation were stolen session tokens, commonly known as cookies. If stolen, they can allow an attacker to take over an active account without needing the victim’s password.

Prosecutors said the suspects fed the stolen tokens into software that checked whether they were still valid. When a token worked, the program assessed what was inside the corresponding Roblox account, including virtual currency and rare in-game items.

The most valuable accounts were sold individually, while less lucrative ones were bundled together and sold in bulk or at a discount, according to investigators. The group allegedly advertised the accounts through Russian online platforms and received payments through cryptocurrency wallets.

Some accounts were sold for around 70 Russian rubles ($.80) each, according to investigators. Prosecutors estimate that selling the compromised accounts could have generated roughly $480,000. Investigators said they traced nearly $54,000 in cryptocurrency proceeds that had been converted into Ukrainian currency and transferred to the suspects’ bank accounts.

All three suspects are in custody and face charges including theft, money laundering, unauthorized interference with computer systems and the illegal sale of restricted information. The offenses carry a maximum sentence of 12 years in prison.