---
title: US Charges 31 More in Massive ATM Hacking Scheme
description: Justice Department charges 31 in ATM jackpotting scheme linked to Tren de Aragua, using Ploutus malware to steal millions.
canonical_url: https://codekeeper.co/ticker/justice-department-charges-in-atm-jackpotting-scheme
---

# US Charges 31 More in Massive ATM Hacking Scheme

Justice Department charges 31 in ATM jackpotting scheme linked to Tren de Aragua, using Ploutus malware to steal millions.

![Content Team](https://codekeeper.co/hubfs/_sized/Codekeeper_21_beeldmerkL-800.png)

By Content Team Jan 28, 2026

Share [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fjustice-department-charges-in-atm-jackpotting-scheme%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fjustice-department-charges-in-atm-jackpotting-scheme%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fjustice-department-charges-in-atm-jackpotting-scheme%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fjustice-department-charges-in-atm-jackpotting-scheme%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fjustice-department-charges-in-atm-jackpotting-scheme%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fjustice-department-charges-in-atm-jackpotting-scheme%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

ON THIS PAGE

### Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our [privacy policy](https://codekeeper.co/privacy-policy) .

The Justice Department charged 31 more people in a massive ATM "jackpotting" scheme, bringing total defendants to 87. Most suspects are Venezuelan nationals, including members of the Tren de Aragua crime syndicate, plus some Colombians. The criminals used Ploutus malware to hack ATMs and steal millions. They physically tampered with machines, swapping hard drives or using USB devices to install the malware. Once activated, it forced ATMs to spit out cash, then deleted itself to avoid detection. While Ploutus peaked in 2017-2018, it remained active through last year. All charged individuals face deportation after conviction. **Source:** [Security Week](https://www.securityweek.com/us-charges-31-more-defendants-in-massive-atm-hacking-probe/)

Share this article [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fjustice-department-charges-in-atm-jackpotting-scheme%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fjustice-department-charges-in-atm-jackpotting-scheme%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fjustice-department-charges-in-atm-jackpotting-scheme%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fjustice-department-charges-in-atm-jackpotting-scheme%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fjustice-department-charges-in-atm-jackpotting-scheme%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fjustice-department-charges-in-atm-jackpotting-scheme%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

![blog_book_a_demo_cta_3x](https://codekeeper.co/hubfs/_sized/Codekeeper%202025/blog_book_a_demo_cta_3x-768x512.webp)

Have questions about protecting your software?

Our escrow experts are standing by to help.

[Book a free demo](https://codekeeper.co/book-a-demo)

YOU MAY ALSO LIKE

[Malware Can Hijack Windows Hello Keys to Break Into Microsoft Cloud Accounts Aug 11, 2026](https://codekeeper.co/ticker/malware-abuses-windows-hello-for-entra-id-access)

[Cyberattacks Trivy Compromise, Not LiteLLM, Drove Most of the March Supply Chain Exposure Aug 17, 2026](https://codekeeper.co/ticker/trivy-scanner-supply-chain-attack-impact)

[Data breaches NHS Worker Shared Patient Records With Partner, Victims Demand Justice Aug 20, 2026](https://codekeeper.co/ticker/somerset-nhs-data-breach-patient-privacy-concerns)

[Coordinated Cyberattack Hits 30+ Minnesota Water Systems in 48 Hours Aug 11, 2026](https://codekeeper.co/ticker/minnesota-water-systems-cyberattack)