Independent research index / First release
Shadowcrew: a marketplace under investigation
Shadowcrew’s history concerns both an online market for stolen information and an international investigation. The record must distinguish the scale alleged at indictment from what particular defendants later admitted.
Source review: 16 October 2026 · Introductory account
2004: the indictment
On 28 October 2004, U.S. authorities announced an indictment of 19 people associated with Shadowcrew. Prosecutors alleged a marketplace involving stolen account information and counterfeit identity documents, with administrators, moderators, and vendors performing different roles. The announcement followed a year-long Secret Service investigation. The indictment was an accusation; the announcement itself reminded readers that defendants were presumed innocent.
Source: U.S. Department of Justice — October 2004 indictment announcement.
2005: pleas follow the arrests
Associated Press reporting published by Wired described six guilty pleas in November 2005, including Andrew Mantovani’s. That changed the status of those defendants’ cases. It did not retroactively make every allegation in the original indictment an adjudicated fact or establish the guilt of every registered forum user.
A case that crossed borders and years
Wired reported in 2013 that Aleksi Kolarov had been extradited to the United States after an arrest in Paraguay. That report described him as facing charges; it is not used here as evidence of a later conviction. Its account also describes the investigation’s use of a cooperating insider. Later docket outcomes remain a research gap in this short chronology.
Source: Wired — July 2013 extradition report.
What the marketplace left behind
The indictment describes a division of labor and vendor review arrangements. Read as an institutional history, the case shows why an online marketplace can matter beyond any one intrusion: it can connect stolen information to buyers. This is our interpretation of the alleged structure. We omit seller instructions, victim identifiers, account data, and links to purported successor markets.
Source: U.S. Department of Justice — alleged organization and roles.