Article · Wikipedia archive · Last revised Jun 12, 2026

Group-IB

Group-IB is a cybersecurity company headquartered in Singapore. It was founded in 2003 by Ilya Sachkov and Dmitry Volkov in Moscow, Russia. It provides threat intelligence, fraud protection, digital forensics, and cybercrime investigation services. It is a partner of Interpol, Europol, and Afripol, and the World Economic Forum Cybercrime Atlas initiative.

Last revised
Jun 12, 2026
Read time
≈ 4 min
Length
902 w
Citations
26
Source
Group-IB
Company type
Private
IndustryCybersecurity
Founded2003
FounderDmitry Volkov
Ilya Sachkov Edit this on Wikidata
Headquarters,
Singapore
Number of locations
Singapore,
The Netherlands,
United Arab Emirates,
Chile,
Egypt,
Saudi Arabia
Vietnam,
Thailand,
Uzbekistan
Area served
Worldwide
Key people
ProductsThreat Intelligence,
Fraud Protection,
Managed Extended Detection and Response,
Attack Surface Management,
Digital Risk Protection,
Business Email Protection,
Cyber Fraud Intelligence Platform,
Cloud Security Posture Management,
Prevyn AI
ServicesCyber Investigations,
Incident Response Readiness Assessment,
Penetration Testing,
Security Assessment,
Compliance Audit & Consulting,
Red Teaming,
Compromise Assessment,
Security Operations Center (SOC) Consulting,
Incident Response and Retainer,
Digital Forensics,
Cybersecurity Training and Workshops
Number of employees
600 (as of March 2026)
Websitewww.group-ib.com

Group-IB is a cybersecurity company headquartered in Singapore. 1 It was founded in 2003 by Ilya Sachkov and Dmitry Volkov in Moscow, Russia.2 It provides threat intelligence, fraud protection, digital forensics, and cybercrime investigation services.3 It is a partner of Interpol4, Europol5, and Afripol6, and the World Economic Forum Cybercrime Atlas initiative7.

In 2023, Group-IB divested and fully exited from Russia. Ilya Sachkov relinquished his entire 37.5% stake in Group-IB, while Dmitry Volkov sold his 10% ownership in Group-IB’s former Russian business.8 The former Russian business would eventually become F.A.C.C.T (now F6) that is not affiliated with Group-IB.9

History

Group-IB was founded in 2003 by Ilya Sachkov and Dmitry Volkov in Russia, to provide cybercrime investigations and digital forensics services.10 In 2017, the company signed a data sharing agreement with Interpol, to coordinate the exchange of threat intelligence.11 The company moved to Singapore in 2019 and received support from the Cyber Security Agency of Singapore.12

In 2019, the firm took 180,000 successful takedown requests for Game of Thrones, reported $3 million worth of fund stolen from a Dutch-Bangla Bank ATM, and reported Turkish payment card details were being sold online.131415

In September 2021, Ilya Sachkov, its co-founder and CEO, was detained by Russian authorities for treason.16 He was sentenced to 14 years in prison.17 In the same year, co-founder Dmitry Volkov took over as CEO of Group-IB.10

In 2023, Group-IB divested and fully exited from Russia. Ilya Sachkov relinquished his entire 37.5% stake in Group-IB, while Dmitry Volkov sold his 10% ownership in Group-IB’s former Russian business.8 The former Russian business would eventually become F.A.C.C.T (since rebranded as F6) that is not affiliated with Group-IB.9

In 2024, Group-IB provided technical and investigation assistance to the Singapore Police Force and the Hong Kong Police Force in “Operation DISTANTHILL”, which led to the arrest of 14 suspects in Hong Kong on charges relating to fraud and money laundering.18 In the same year, Group-IB investigated the Mobile Guardian security breach, and identified that over 300 account credentials related to the Mobile Guardian administration appeared for sale, 70 of which were on sale on the dark web.19

In March 2025, Group-IB contributed to INTERPOL’s “Operation Red Card” that resulted in the arrest of 306 cybercriminals and the dismantling of criminal networks responsible for scams targeting over 5,000 victims.20 In the same year, it was reported that Group-IB was acting as legal agent for Tencent, a company controlled by the Chinese Communist Party, in attempting to kill FreeWechat.com, an anti-censorship WeChat archive developed by Chinese censorship monitoring website GreatFire to enforce the Communist Party's Great Firewall.212223

References

References

  1. "Cyber firm Group-IB finalises Russia split to spur global ambitions". Reuters. Archived from the original on 1 August 2023. Retrieved 8 June 2026.
  2. Builov, Maxim; Isakova, Tatyana; Sherunkova, Olga (29 September 2021). "Неизменимых нет" [No one is unchangeable]. Kommersant (in Russian).
  3. Raj, Aaron (22 October 2025). "Group-IB launches Asia-Pacific's first Cyber Fusion Center in Singapore". CRN Asia.
  4. Olenick, Doug (2 November 2017). "Group IB, INTERPOL sign data exchange agreement". SC Media. Retrieved 8 June 2026.
  5. "Europols European Cybercrime Centre signs MoU with Group-IB". thepaypers.com. Retrieved 8 June 2026.
  6. Thomas, Abdul Rashid (20 February 2024). "AFRIPOL signs MoU with Group-IB to strengthen Africa's cybersecurity capabilities". The Sierra Leone Telegraph. Retrieved 8 June 2026.
  7. "New WEF-backed Report Highlights Deepfake Risks to KYC Systems". DIGIT. 12 January 2026. Retrieved 8 June 2026.
  8. "Илья Сачков вышел из международного бизнеса Group-IB". Interfax. 20 April 2023.
  9. "Group-IB's stake in Russia sold to local shareholders, business to operate under new brand". TASS. Retrieved 8 June 2026.
  10. "Dmitry Volkov, CEO of Group-IB". The CEO Magazine.
  11. Olenick, Doug (2 November 2017). "Group IB, INTERPOL sign data exchange agreement". scworld.com.
  12. "Russian cyber titan Group-IB makes Singapore home". Channel Asia. Retrieved 10 March 2024.
  13. "Game of Thrones Piracy in Russia: 180,000 Takedowns, Mirror Wars & Capitulation * TorrentFreak". torrentfreak.com. Retrieved 12 October 2025.
  14. "Russian 'Silence' hacking crew turns up the volume – with $3m-plus cyber-raid on bank's cash machines". Archived from the original on 19 May 2025. Retrieved 12 October 2025.
  15. "460,000 Turkish card details put up for sale, web skimmers suspected". ZDNET. Retrieved 12 October 2025.
  16. "Russia detains cyber-security tycoon Ilya Sachkov in treason case". BBC. 29 September 2021. Retrieved 10 March 2024.
  17. "Russian cybersecurity chief jailed for 14 years for treason". Al Jazeera. Retrieved 10 March 2024.
  18. Salmon, Kaleah. "Group-IB helps bust Southeast Asian cyber fraud syndicate". SecurityBrief Asia. Retrieved 8 June 2026.
  19. "Mobile Guardian breach: Protocols in place but more could be done, say experts". Channel NewsAsia. 9 August 2024. Retrieved 31 March 2026.
  20. "Public-Private Ops Net Big Wins Against African Cybercrime". Archived from the original on 22 August 2025. Retrieved 8 June 2026.
  21. NetAskari (8 July 2025). "SLAPP: The "Stealthy Way" of Censorship". NetAskari. Retrieved 5 August 2025.
  22. Sharwood, Simon (11 July 2025). "Chinese censorship-busters claim Tencent is trying to kill its WeChat archive". The Register.
  23. Dar, Khunsha (17 July 2025). "Chinese tech firm Tencent seeks removal of anti-censorship archive FreeWeChat, watchdog says". Hong Kong Free Press.