Security News

North Macedonia Charges Alleged Admin of OLVX Marketplace That Sold Stolen Data and Credentials

CyberScoop · 15 Oct 2026
Key Takeaway Turn on multi-factor authentication and use unique passwords for every business account, so that a stolen login sold on a marketplace like this cannot be used on its own to get in.

Authorities in North Macedonia have filed charges against the alleged administrator of OLVX, a cybercrime marketplace that has sold stolen personal data, login credentials and malicious tools since 2023. The suspect is a 20-year-old citizen identified by officials only as "E.A." They are accused of computer fraud, misuse of personal data, and the production and distribution of child sexual abuse material.

The charges come six months after European authorities dismantled the platform, arrested the alleged administrator and searched their home in April. Officials said at that time that sales exceeded $500,000 and that a seized server held a database of more than 2,600 customer accounts. Evidence gathered in the investigation indicates the suspect allegedly offered more than 1,500 sets of stolen credentials for sale, and administered the domains and sites linked to OLVX between 2023 and 2025.

The FBI provided intelligence and supported the joint investigation, which it described as the first cyber operation it has coordinated with North Macedonia. Authorities also accuse the suspect of running a Telegram group, including earlier this year, where illegal services and software were sold to enable cybercrime, such as fraudulent refund schemes. This case shows how stolen credentials are traded openly and cheaply, putting ordinary business and customer accounts at risk.

Summarised by CISO AI from CyberScoop, written with Claude Sonnet 5.5. We link back to every original so you can read it yourself.