U.S. federal authorities, working with international partners, took down servers and domains and seized about $1 million in cryptocurrency linked to the BlackSuit ransomware gang.

The group, which rebranded from Royal ransomware in 2024, had targeted over 100 companies last year across industries like manufacturing, education, health care, and construction, and compromised more than 450 U.S. victims since 2022.

While the takedown disrupts BlackSuit’s operations, experts warn the gang could potentially rebuild or rebrand, Axios has reported.