Shadowcrew: a marketplace under investigation
2004–2013 selected milestones
Reviewed 2026-10-16

Shadowcrew’s history concerns both an online market for stolen information and an international investigation. The record must distinguish the scale alleged at indictment from what particular defendants later admitted.

2004: the indictment
On 28 October 2004, U.S. authorities announced an indictment of 19 people associated with Shadowcrew. Prosecutors alleged a marketplace involving stolen account information and counterfeit identity documents, with administrators, moderators, and vendors performing different roles. The announcement followed a year-long Secret Service investigation. The indictment was an accusation; the announcement itself reminded readers that defendants were presumed innocent.
Source: U.S. Department of Justice — October 2004 indictment announcement
https://www.justice.gov/archive/opa/pr/2004/October/04_crm_726.htm

2005: pleas follow the arrests
Associated Press reporting published by Wired described six guilty pleas in November 2005, including Andrew Mantovani’s. That changed the status of those defendants’ cases. It did not retroactively make every allegation in the original indictment an adjudicated fact or establish the guilt of every registered forum user.
Source: Associated Press / Wired — November 2005 pleas
https://www.wired.com/2005/11/guilty-pleas-in-id-theft-bust

A case that crossed borders and years
Wired reported in 2013 that Aleksi Kolarov had been extradited to the United States after an arrest in Paraguay. That report described him as facing charges; it is not used here as evidence of a later conviction. Its account also describes the investigation’s use of a cooperating insider. Later docket outcomes remain a research gap in this short chronology.
Source: Wired — July 2013 extradition report
https://www.wired.com/2013/07/bulgarian-shadowcrew-arrest

What the marketplace left behind
The indictment describes a division of labor and vendor review arrangements. Read as an institutional history, the case shows why an online marketplace can matter beyond any one intrusion: it can connect stolen information to buyers. This is our interpretation of the alleged structure. We omit seller instructions, victim identifiers, account data, and links to purported successor markets.
Source: U.S. Department of Justice — alleged organization and roles
https://www.justice.gov/archive/opa/pr/2004/October/04_crm_726.htm

Historical and educational reporting, not operational guidance or legal advice. Allegations are identified as allegations; charges are not convictions. A plea or judgment applies to the identified person and conduct, not to every associate, reader, or community. Source inclusion is not endorsement. This account is limited to the cited record and may be corrected as reliable evidence changes.