Sofia/DB-cleanup
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

K&R database cleanup: handoff bundle

Browse Source 
Self-contained bundle to continue the case-summary enrichment pass (70/256 done). sources/ holds the 364 .txt dossiers; scripts use relative paths.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018FJRciSWZc9HftS2edbzBf
This commit is contained in:
Sofia
2026-09-02 19:49:46 -03:00
co-authored by Claude Opus 4.8
commit ba7529ea50
735 changed files with 90597 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitignore
+4
View File
@@ -0,0 +1,4 @@
__pycache__/
*.pyc
~$*
.DS_Store
KR-reports_analysis_Sofi.xlsx
BIN
View File
Binary file not shown.
README-START-HERE.md
+188
View File
@@ -0,0 +1,188 @@
# Gart K&R Database - Handoff (read this first)
Written 2026-09-02. This folder is a self-contained bundle. Everything the next AI needs to
continue is inside it, and all script paths are relative, so the folder can be moved or zipped
and still run.
Read order: (1) this file, (2) merge-output/sofia-worklist.md (the human's manual task list).
--------------------------------------------------------------------------------
## Folder layout
Gart-KR-handoff/
README-START-HERE.md <- this file
source-checker-agent.md <- the read-only reviewer agent (install in .claude/agents/)
attacks-export-Gart-website.json <- SOURCE: the live DB export (read-only)
KR-reports_analysis_Sofi.xlsx <- SOURCE: the old article spreadsheet (read-only)
merge-output/
sources/ <- THE DELIVERABLE: 364 .txt dossiers (build_cases writes here)
build_cases.py <- rebuilds all 364 .txt files
verify_all.py <- deterministic audit (must say PASS)
survey_summaries.py <- lists which cases still have short summaries
build_overrides_batch1..7.py <- the summary rewrites, one script per batch
dump_cell.py <- helper: prints a spreadsheet cell line-by-line
summary-overrides.json <- the improved summaries (build input)
sheet-trim-decisions.json <- article furniture cuts (build input)
sourced-articles.json <- fetched-article store (build input)
sofia-worklist.md <- the human's manual to-do list
(other .py and .json files are finished-phase artifacts, not needed to continue)
Scripts live in merge-output/ and must be run from there (they find the two source files in
the parent folder automatically). Always call them with the full path, for example:
python "<path-to>/Gart-KR-handoff/merge-output/build_cases.py" --all
Requirements to run this:
- Python 3 with the openpyxl package (pip install openpyxl) - build_cases.py reads the .xlsx.
- The review step uses a read-only fact-checking sub-agent. Its definition is included here as
source-checker-agent.md (bundle root). In Claude Code, drop it into your project's
.claude/agents/ folder so you can invoke it; otherwise any capable read-only checker works -
just feed it the source-checker prompt (further down this doc) plus the batch's file list.
--------------------------------------------------------------------------------
## What this project is
Gart's K&R attack database lists 364 real kidnap/robbery/extortion incidents against
cryptocurrency holders. For each case we merged the structured DB record with any saved news
article, and produce one readable .txt dossier per case. There is no app, no build system, no
tests - just Python scripts that regenerate the .txt files, plus Markdown notes.
### Hard rules (do not break these)
1. Never edit the live database. attacks-export-Gart-website.json and the .xlsx are READ-ONLY.
Any DB correction goes to sofia-worklist.md for Sofia to apply herself.
2. Never fabricate. Every statement must trace to that case's own DB record or its article text.
If a source does not say it, do not write it. Record-only cases stay short - do not pad them.
3. Do not translate articles into the archive. Non-English article text is stored verbatim.
You MAY read a foreign-language article to write an English summary (that is derived facts,
not a stored translation), but never write a translation into a stored file.
4. Work in descending ID order (nothing gets skipped).
5. Every record-vs-article contradiction is a note for Sofia - log it, do not "resolve" it by
guessing which side is right.
### Environment
- Windows / PowerShell, with a Bash tool available (Git Bash).
- In the Bash tool, a "cd" inside a compound command triggers a permission prompt - always use
full paths instead.
- Any Python script that prints non-ASCII must wrap stdout, or it crashes on Windows:
import sys, io
sys.stdout = io.TextIOWrapper(sys.stdout.buffer, encoding="utf-8", errors="replace")
Put that inside main() if another script imports the file.
--------------------------------------------------------------------------------
## The deliverable, and what still needs the human
Two different kinds of change came out of this work. They are NOT the same:
1. The improved SUMMARIES are already baked into the .txt files. build_cases.py renders each
rewritten summary into its dossier under the banner "AI SUMMARY [revised on review ...]".
So if Sofia uploads the .txt files as the DB's dossier source, the summaries are upgraded.
There is no separate "apply-list" to work through for summaries. summary-overrides.json is
just the build INPUT that injects them; it is not a manual chore.
2. The DB FIELD / FLAG corrections in sofia-worklist.md are NOT in the .txt files. The
DATABASE RECORD block in each dossier is printed verbatim from the live DB, so it still shows
the old, wrong field values (for example case 353 still says "100 million rubles", case 219
still says "beaten with a stick"). Uploading the .txt does NOT fix those. They are advisory
notes for Sofia to apply on the DB side if and when she wants. She said she will do these last.
--------------------------------------------------------------------------------
## What is already FINISHED
- Matching: all 364 records matched to their spreadsheet rows / fetched sources.
- Article merge: spreadsheet and web-fetched articles are in the dossiers.
- Article trimming: site furniture removed from fetched and spreadsheet articles; every kept
line is a verbatim line of the source; provenance hashes preserved. Reviewed twice.
- Source-coverage reconciliation: 344 of 364 cases have a usable source; 20 have none (all
listed on the worklist). No case silently lost its last source.
- verify_all.py PASSES (896 checks). Confirmed from this bundle's new location.
--------------------------------------------------------------------------------
## The task in progress: summary enrichment
Goal: bring the short/weak bulk-import summaries up to the standard of the newest cases
(447-462), which have six labelled categories and run roughly 970-2100 characters:
Victims / Attackers / Attack Method / Violence Used / Crypto Demanded/Stolen / Status
A survey (survey_summaries.py) found 256 of 364 cases under the bar (under 400 chars or fewer
than 4 categories). These are the targets, worked in descending ID order.
### How it works
- Rewrites live in summary-overrides.json, keyed by DB id (string).
- build_cases.py loads it and renders the rewrite in place of the old bulk summary.
- The live DB export is never touched.
### Method, per case
- Read the whole dossier: the DATABASE RECORD block AND every ARTICLE / FETCHED ARTICLE section
(any language).
- Write the six categories from ONLY what the record + that case's articles support. No repeated
facts across categories. Keep the source's own hedging ("allegedly", "police said", "he says").
- Record-only or wrong-source cases (dead/blocked/thin link): restructure the record's
description + notes + flags into the six categories, faithfully, and stay short. Do not invent.
- Round-up articles (one article, several incidents): use ONLY the passage about THIS case;
drop the other incidents and any trend-commentary tail.
- Foiled / "dodged" attacks with no one harmed: "Violence Used: None - the attempt was foiled."
### Workflow per batch (about 10 cases)
1. Write build_overrides_batchN.py (copy an existing one; it does existing.update(B) then writes
summary-overrides.json; escape non-ASCII with \\uXXXX). Run it.
2. Run build_cases.py --all, then verify_all.py (must say PASS).
3. Run the source-checker sub-agent (read-only; tell it NOT to fetch) to fact-check the batch's
summaries against each file's own record + article. This is Sofia's explicit requirement.
4. Fix every fair flag in the batch script, rebuild, verify. The batch is then locked.
5. Add any DB field/source problems you find to sofia-worklist.md.
### The source-checker prompt that works
"Read-only fact-check. Do NOT fetch. For each file, verify every claim in the revised summary
(under the 'revised on review' banner) is supported by the DATABASE RECORD block and/or the
embedded article text in the SAME file. Flag FABRICATED / CONTRADICTED / OVERSTATED (note:
source-matching hedges like 'allegedly' are correct, not flags). Tell it about round-up files,
foiled plots, and any known wrong-source case so it does not over-flag."
### The pitfalls the reviewer keeps catching (avoid these up front)
1. Dropped hedges - keep "allegedly / he believes / police said"; do not state a claim as fact.
2. Inferred negatives - do not write "no arrests reported" when the source is just silent on it.
3. Unsupported cross-links - do not tie a case to another case unless THIS file says so.
4. Added specifics not in the file - no invented brand ("Toyota" when it says only "Vigo"),
residency, or family composition ("two parents" when only "the mother" is mentioned).
5. Number / currency / date math - get units exact; when the DB date and the article date
disagree, say "late March" and log the conflict rather than silently picking one.
6. Mis-attributed timestamps - a time in the article belongs to a specific moment; do not move it.
7. Round-up / tail exclusion - use only this case's passage (the reviewer expects this).
8. Follow the article over a wrong DB field, and log the conflict on the worklist. Exception: a
record-only / wrong-source case has no article - write from the record and say so.
9. Naming - only name a person the linked source names. If the source withholds the victim's
name but the DB carries one, describe the victim generically in the summary body.
--------------------------------------------------------------------------------
## Progress
Done and reviewer-verified: batches 1-7, 70 of 256 cases. IDs completed:
B1: 372,371,370,369,368,367,365,364,362,353
B2: 350,349,340,334,323,322,321,317,315,312
B3: 309,308,307,304,303,301,299,298,297,296
B4: 293,292,290,288,285,279,273,272,271,270
B5: 266,263,256,253,252,249,248,247,246,245
B6: 244,243,242,240,238,237,236,235,234,233
B7: 232,231,230,229,228,224,222,221,219,218
summary-overrides.json holds 70 entries. verify_all.py PASSES.
Remaining: continue descending from ID 217 (217,216,215,214,213,212,211,210,208,207 ...) down to
case 1 - about 186 short cases, roughly 19 more batches. Get the exact remaining list with:
python ".../merge-output/survey_summaries.py"
and take the ids flagged SHORT / unstructured, descending.
--------------------------------------------------------------------------------
## Quick-start checklist for the next AI
1. Read this file and merge-output/sofia-worklist.md.
2. Confirm the bundle is healthy:
python ".../merge-output/verify_all.py" (should say PASS)
summary-overrides.json should have 70 entries.
3. Pick the next ~10 short cases descending from ID 217 (use survey_summaries.py). Read each
dossier in full. Write build_overrides_batch8.py (copy batch 7's structure). Run it, then
build_cases.py --all, then verify_all.py.
4. Run the source-checker agent on the batch (read-only, no fetch). Apply fair flags; rebuild;
verify. Then the batch is locked.
5. Repeat down to case 1.
6. Keep adding DB field/source problems to sofia-worklist.md. Never edit the DB.
7. When all summaries are done, the deliverables are: the sources/*.txt (already carry the
improved summaries) and sofia-worklist.md (Sofia's manual DB fixes, done last on her side).
attacks-export-Gart-website.json
+11286
View File
File diff suppressed because it is too large Load Diff
merge-output/apply_sources.py
+284
View File
@@ -0,0 +1,284 @@
"""
Turn staged source text into the phase-2 article store.
The store, sourced-articles.json, is read by build_cases.py when it renders case
files, so rebuilds stay idempotent: nothing is ever appended to a .txt by hand.
Article bodies are SLICED from the staged files by paragraph index. No text is
retyped, so "verbatim" holds by construction, and each slice carries the sha256 of
both the staged file it came from and the slice itself.
Reviewed decisions live in DECISIONS. Everything here was signed off in session.
"""
import hashlib
import json
from pathlib import Path
BASE = Path(__file__).resolve().parent
STAGING = BASE / "staging"
STORE = BASE / "sourced-articles.json"
TRANSLATIONS = BASE / "translations.json"
# start/end are inclusive paragraph indices into the staged file, chosen by reading
# the file and finding where the article stops and site furniture begins.
DECISIONS = {
460: [
{"field": "url", "file": "01_thebalitimes-com.txt", "verdict": "KEEP",
"source": "The Bali Times", "lang": "en", "start": 0, "end": 13,
"cut_note": "dropped a site disclaimer and 5 unrelated recommended-article teasers"},
{"field": "url_2", "file": "02_beincrypto-com.txt", "verdict": "KEEP",
"source": "BeInCrypto", "lang": "en", "start": 0, "end": 12,
"note": "original wire story; url_3 and url_5 are syndications of this",
"cut_note": "dropped a self-promo line and 10 unrelated teasers"},
{"field": "url_3", "verdict": "SYNDICATION", "source": "CoinDesk", "of": "url_2"},
{"field": "url_5", "verdict": "SYNDICATION", "source": "Yahoo News", "of": "url_2",
"note": "carries one extra paragraph on the wider wrench-attack trend"},
{"field": "url_4", "file": "04_balidiscovery-com.txt", "verdict": "KEEP",
"source": "Bali Discovery", "lang": "en", "start": 0, "end": 15,
"cut_note": "nothing removed; the transcription contains no site furniture",
"method": "WebFetch transcription (site returns 403 to raw retrieval)",
"fetched_at": "2026-07-30 (WebFetch)",
"note": "The only source naming the victim and an amount, and it attributes BOTH to "
"an Instagram interview rather than to police. States explicitly that police "
"'have yet to share the amount of money lost'. Does not name the villa."},
],
462: [
{"field": "url", "file": "01_livecoins-com-br.txt", "verdict": "KEEP",
"source": "Livecoins", "lang": "pt", "start": 4, "end": 23, "translate": True,
"note": "headline says US$ 750 mil while the body says R$ 750 mil; the body matches "
"the record",
"cut_note": "dropped 4 leading site-branding lines, a WhatsApp promo and 16 teasers"},
{"field": "url_2", "verdict": "NOT AN ARTICLE", "source": "YouTube",
"note": "deliberately linked. Titled around an empresario; Brazilian outlets describe "
"this victim as both influencer and businessman. Not a mismatch."},
{"field": "extra_1", "file": "03_acidadeon-com.txt", "verdict": "KEEP",
"source": "ACidade ON Ribeirao Preto", "lang": "pt", "start": 0, "end": 17,
"translate": True,
"note": "NOT linked on the record. Found while resolving the amount. Reports "
"R$800,000 where Livecoins reports R$750,000. Record keeps R$750,000; the "
"conflict is preserved here.",
"cut_note": "dropped a tip-line promo, 3 unrelated local teasers, a tag list and a "
"cookie notice"},
],
461: [
{"field": "url", "verdict": "NOT AN ARTICLE", "source": "NYPD Tips (X)",
"note": "police wanted-bulletin post; recorded as a source, not transcribed"},
{"field": "url_2", "file": "02_hoodline-com.txt", "verdict": "KEEP",
"source": "Hoodline", "lang": "en", "title": 0, "start": 6, "end": 14,
"cut_note": "dropped city-nav lists at the head and 16 unrelated local teasers"},
],
459: [
{"field": "url", "file": "01_geo-tv.txt", "verdict": "KEEP", "source": "Geo News",
"lang": "en", "title": 0, "start": 5, "end": 13,
"cut_note": "dropped 12 unrelated national-news teasers"},
{"field": "url_2", "file": "02_abbtakk-tv.txt", "verdict": "KEEP", "source": "Abb Takk News",
"lang": "en", "title": 0, "start": 11, "end": 17,
"cut_note": "dropped 10 leading and 2 trailing unrelated headlines"},
{"field": "url_3", "file": "03_en-dailypakistan-com-pk.txt", "verdict": "KEEP",
"source": "Daily Pakistan", "lang": "en", "title": 0, "start": 23, "end": 30,
"cut_note": "dropped 22 blank or nav paragraphs and 33 unrelated teasers"},
{"field": "url_4", "file": "04_propakistani-pk.txt", "verdict": "KEEP",
"source": "ProPakistani", "lang": "en", "title": 0, "start": 1, "end": 16,
"cut_note": "dropped an inline related-story teaser and the site footer"},
],
458: [
{"field": "url", "file": "01_journalducoin-com.txt", "verdict": "KEEP",
"source": "Journal du Coin", "lang": "fr", "title": 0, "start": 5, "end": 22,
"note": "covers a series of incidents on the night of 13-14 June, including case 457",
"cut_note": "dropped site nav at the head, a Bitpanda advert, an author bio and a "
"cookie notice"},
{"field": "url_2", "file": "02_laprovence-com.txt", "verdict": "PARTIAL",
"source": "La Provence", "lang": "fr", "title": 0, "start": 3, "end": 10,
"note": "PAYWALLED. The page states 'Il vous reste 75% a lire'. Only the opening "
"quarter is retrievable; the rest sits behind a subscription.",
"cut_note": "dropped the paywall prompt and a subscribe block"},
{"field": "url_3", "file": "03_cryptopolitan-com.txt", "verdict": "KEEP",
"source": "Cryptopolitan (Spanish edition)", "lang": "es", "title": 0,
"start": 8, "end": 44,
"note": "covers the same series as Journal du Coin, including case 457",
"cut_note": "dropped 7 leading unrelated headlines and a repeated table of contents"},
],
457: [
{"field": "url", "file": "01_journalducoin-com.txt", "verdict": "KEEP",
"source": "Journal du Coin", "lang": "fr", "title": 0, "start": 5, "end": 22,
"note": "same article as case 458. Covers the series on the night of 13-14 June; this "
"record is the Marseille 13e attempted entry at around 3am",
"cut_note": "dropped site nav at the head, a Bitpanda advert, an author bio and a "
"cookie notice"},
{"field": "url_2", "file": "02_laprovence-com.txt", "verdict": "PARTIAL",
"source": "La Provence", "lang": "fr", "title": 0, "start": 3, "end": 10,
"note": "PAYWALLED, 75% unavailable. The retrievable portion opens on this incident: "
"'vers 3h du matin, ce soir du samedi 13 juin 2026, dans le 13e arrondissement'",
"cut_note": "dropped the paywall prompt and a subscribe block"},
{"field": "url_3", "file": "03_cryptopolitan-com.txt", "verdict": "KEEP",
"source": "Cryptopolitan (Spanish edition)", "lang": "es", "title": 0,
"start": 8, "end": 44,
"note": "same article as case 458",
"cut_note": "dropped 7 leading unrelated headlines and a repeated table of contents"},
],
456: [
{"field": "url", "verdict": "NOT AN ARTICLE", "source": "YouTube",
"note": "video; recorded as a source, not transcribed"},
{"field": "url_2", "file": "02_acessa-com.txt", "verdict": "KEEP",
"source": "Acessa (UOL/Folhapress)", "lang": "pt", "title": 0, "start": 2, "end": 11,
"cut_note": "dropped a section label and a newsletter promo"},
{"field": "url_3", "file": "03_serranoticiario-com-br.txt", "verdict": "KEEP",
"source": "Serra Noticiario", "lang": "pt", "title": 0, "start": 23, "end": 44,
"starts_with": "Criminosos exigiram transfer",
"ends_with": "Força Tática do 6º Batalhão.",
"cut_note": "dropped 22 leading unrelated teasers and a tip-line prompt. Range was "
"22-42 until the page was re-fetched and shifted by two paragraphs; "
"anchors now guard against that."},
{"field": "extra_1", "file": "06_tribunaonline-com-br.txt", "verdict": "KEEP",
"source": "A Tribuna (earlier same-day piece)", "lang": "pt",
"title": 215, "start": 223, "end": 228,
"starts_with": "O homem sequestrado em plena luz do dia",
"note": "Added after research. The only source reporting any assault during the "
"abduction: 'A vitima teria tentado resistir ao sequestro, mas foi agredida'. "
"Attributed to unnamed residents and grammatically conditional. Also carries "
"'Ate o momento, ninguem foi detido', which dates it before the arrest.",
"cut_note": "dropped a login prompt, subhead, datelines and 16 unrelated teasers"},
{"field": "extra_2", "file": "07_agazeta-com-br.txt", "verdict": "KEEP",
"source": "A Gazeta", "lang": "pt", "title": 0, "start": 4, "end": 6,
"starts_with": "Um homem de 25 anos foi detido em Jardim Carapina",
"note": "Added after research. Timestamped 11 June 18:19, which is what places the "
"arrest AFTER Sim Noticias published 'ninguem foi preso'. Confirms the "
"seizure inventory including three magazines.",
"cut_note": "this page carries several unrelated stories; kept only the three "
"paragraphs of this one. The auto-proposer picked a different article "
"entirely, about a woman arrested for threatening her daughter-in-law."},
{"field": "extra_3", "file": "08_simnoticias-com-br.txt", "verdict": "KEEP",
"source": "Sim Noticias (arrest follow-up)", "lang": "pt",
"title": 0, "start": 105, "end": 122,
"starts_with": "Um jovem de 25 anos foi preso nesta quinta-fe",
"ends_with": "car e localizar os demais suspeitos envolvidos no caso.",
"note": "Added after research. Published 12 June 08:30, the day after. Confirms the "
"arrest and the three-magazine seizure.",
"cut_note": "dropped 104 leading nav paragraphs and 15 trailing teasers"},
{"field": "url_4", "file": "04_simnoticias-com-br.txt", "verdict": "KEEP",
"source": "Sim Noticias", "lang": "pt", "title": 0, "start": 108, "end": 118,
"exclude": [114, 115],
"cut_note": "dropped 107 blank or nav paragraphs, 14 trailing teasers, and 2 teaser "
"headlines sitting INSIDE the article body (a lost-phone story and "
"'Gari que movimentou R$ 4 milhoes', an unrelated operation). The bulk "
"import appears to have folded that second teaser into this case's "
"summary as a drug-trafficking network claim."},
{"field": "url_5", "file": "05_tribunaonline-com-br.txt", "verdict": "KEEP",
"source": "A Tribuna", "lang": "pt", "start": 225, "end": 237,
"note": "reports the arrest and weapons seizure during the search rather than the "
"abduction itself. A paywall marker appears on the page but it gates the "
"comments, not the article.",
"cut_note": "dropped 224 leading nav paragraphs and a subscription pitch"},
],
}
def sha(t):
return hashlib.sha256(t.encode("utf-8")).hexdigest()
def main():
store = json.loads(STORE.read_text(encoding="utf-8")) if STORE.exists() else {}
translations = json.loads(TRANSLATIONS.read_text(encoding="utf-8")) if TRANSLATIONS.exists() else {}
for cid, decisions in DECISIONS.items():
index = {e["field"]: e for e in
json.loads((STAGING / f"{cid:03d}" / "index.json").read_text(encoding="utf-8"))}
out = []
for d in decisions:
src = index.get(d["field"], {})
entry = {k: d[k] for k in ("field", "verdict", "source", "note", "of") if k in d}
entry["url"] = src.get("url")
if d["verdict"] not in ("KEEP", "PARTIAL"):
out.append(entry)
continue
path = STAGING / f"{cid:03d}" / d["file"]
full = path.read_text(encoding="utf-8")
paras = full.split("\n\n")
# Optional headline paragraph, then one contiguous body range. Each piece is
# checked against the staged file separately, since prepending the title makes
# the joined result non-contiguous by design.
# Teaser headlines for unrelated stories sometimes sit INSIDE the body, so a
# single contiguous range is not enough. Excluded indices split the range into
# runs; each run is verified against the staged file separately.
keep = [i for i in range(d["start"], d["end"] + 1)
if i not in set(d.get("exclude", []))]
runs, run = [], []
for i in keep:
if run and i == run[-1] + 1:
run.append(i)
else:
if run:
runs.append(run)
run = [i]
if run:
runs.append(run)
pieces = []
if d.get("title") is not None:
pieces.append(paras[d["title"]])
pieces += ["\n\n".join(paras[r[0]:r[-1] + 1]) for r in runs]
for piece in pieces:
if piece not in full:
raise SystemExit(f"ABORT: slice for case {cid} {d['field']} is not a "
f"substring of the staged file")
body = "\n\n".join(pieces)
# Staged files are re-fetched from live pages, so paragraph indices drift when
# a site adds or drops a teaser. A shifted range still slices a valid substring
# and would pass the check above, so anchor the ends to their expected text.
first, last = paras[keep[0]], paras[keep[-1]]
if d.get("starts_with") and not first.startswith(d["starts_with"]):
raise SystemExit(
f"ABORT: case {cid} {d['field']} starts on the wrong paragraph.\n"
f" expected to start: {d['starts_with']!r}\n"
f" actually starts : {first[:80]!r}\n"
f" The staged file has changed. Re-derive the cut with propose_cuts.py.")
if d.get("ends_with") and not last.rstrip().endswith(d["ends_with"]):
raise SystemExit(
f"ABORT: case {cid} {d['field']} ends on the wrong paragraph.\n"
f" expected to end: {d['ends_with']!r}\n"
f" actually ends : {last[-80:]!r}\n"
f" The staged file has changed. Re-derive the cut with propose_cuts.py.")
key = f"{cid}:{d['field']}"
entry.update({
"language": d["lang"],
"text": body,
"chars": len(body),
"sha256": sha(body),
"staged_file": d["file"],
"staged_sha256": sha(full),
"paragraphs_kept": (f"headline [{d['title']}] + " if d.get("title") is not None
else "") + f"{d['start']}-{d['end']} of {len(paras)}",
"cut_note": d.get("cut_note"),
"method": d.get("method", "raw HTTP retrieval, deterministic extraction"),
"fetched_at": d.get("fetched_at", src.get("fetched_at")),
"http": None if d.get("method") else src.get("http"),
})
if d.get("translate"):
entry["translation"] = translations.get(key)
entry["translation_status"] = "present" if translations.get(key) else "PENDING"
out.append(entry)
store[str(cid)] = out
STORE.write_text(json.dumps(store, ensure_ascii=False, indent=2), encoding="utf-8")
for cid, entries in store.items():
print(f"\ncase {cid}")
for e in entries:
extra = ""
if e["verdict"] in ("KEEP", "PARTIAL"):
extra = (f"{e['chars']:,} chars, paras {e['paragraphs_kept']}, "
f"{e['language']}"
+ (f", translation {e['translation_status']}" if "translation_status" in e else ""))
print(f" [{e['verdict']:<15}] {e.get('field',''):<9} {str(e.get('source'))[:26]:28} {extra}")
if __name__ == "__main__":
main()
merge-output/build_cases.py
+522
View File
@@ -0,0 +1,522 @@
"""
Build one .txt dossier per case from the exported DB plus the saved article text.
Matching is settled before this runs (see final-mapping below). Article bodies are
copied verbatim. Where one article documents several cases, each file also carries a
RELEVANT EXCERPT made only of verbatim paragraphs from the article beneath it, and
the build asserts that every excerpt line really is a substring of the full text.
Run with --samples to write two example files and stop.
Run with --all to write every case file.
Inputs are never modified.
"""
import argparse
import hashlib
import json
import re
import unicodedata
from collections import defaultdict
from pathlib import Path
import openpyxl
BASE = Path(__file__).resolve().parent
SRC = BASE.parent
XLSX = SRC / "KR-reports_analysis_Sofi.xlsx"
JSONF = SRC / "attacks-export-Gart-website.json"
OUT = BASE / "sources"
SAMPLES = BASE / "samples"
MIN_LEN = 200
ART_COLS = [("Articles", 1), ("Article 2", 2), ("Article 3", 3)]
# Matches settled during review. Loaded from the approval artefacts rather than
# retyped, so this file cannot drift from what was actually signed off.
URL_RESOLVED = {59: 58, 74: 73, 193: 318} # byte-identical URL + corroborating text
BY_ELIMINATION = {164: 307} # Salford incident 4
def load_approved():
approved, rules = {}, {}
for fname, rule in (("proposed-auto-matches.json", "exact date + country, unique candidate"),
("review-16.json", "reviewed and approved individually")):
for m in json.loads((BASE / fname).read_text(encoding="utf-8")):
approved[m["sheet_row"]] = m["j_id"]
rules[m["sheet_row"]] = rule
for row, jid in URL_RESOLVED.items():
approved[row] = jid
rules[row] = "identical source URL plus corroborating article text, approved"
for row, jid in BY_ELIMINATION.items():
approved[row] = jid
rules[row] = "confirmed by elimination across the 5-incident Salford cluster, approved"
return approved, rules
APPROVED, APPROVED_RULES = load_approved()
# Furniture cuts for phase-1 spreadsheet articles, decided on review. Keyed "case:column".
# Each entry drops furniture line indices (or keeps only listed ones). Every retained line is
# still a verbatim line of the original cell; the full cell is hashed for provenance so the
# archive link survives even though the embedded text is now trimmed.
SHEET_TRIM_PATH = BASE / "sheet-trim-decisions.json"
SHEET_TRIM = (json.loads(SHEET_TRIM_PATH.read_text(encoding="utf-8"))
if SHEET_TRIM_PATH.exists() else {})
# Improved case summaries, rewritten on review against the case's own sources and record.
# Keyed by DB id (string). The live DB summary field is never touched; this file is the
# deliverable Sofia applies on the website. Every claim in a rewrite must trace to the
# record or a source already in the case file (no fabrication) — the source-checker verifies.
SUMMARY_OVERRIDES_PATH = BASE / "summary-overrides.json"
SUMMARY_OVERRIDES = (json.loads(SUMMARY_OVERRIDES_PATH.read_text(encoding="utf-8"))
if SUMMARY_OVERRIDES_PATH.exists() else {})
def apply_sheet_trim(cell, dec):
lines = cell.split("\n")
if "keep" in dec:
kept = [i for i in dec["keep"] if 0 <= i < len(lines)]
else:
drop = set(dec.get("drop", []))
kept = [i for i in range(len(lines)) if i not in drop]
text = "\n".join(lines[i] for i in kept)
for i in kept: # every kept piece must be a real line of the cell (no fabrication)
if lines[i] not in cell:
raise SystemExit(f"ABORT: sheet-trim produced a line not in the cell ({dec})")
return text
# One article, five cases. Excerpts are SLICED from the article body between two
# anchors rather than transcribed, so "verbatim" is structural instead of asserted.
# Anchors deliberately avoid apostrophes and quotes, which vary in the source text.
SALFORD_SOURCE_ROW = 164
SALFORD = {
354: ("The abuse first began", "transfer cryptocurrency to him."),
355: ("Later that month, another associate", "demanding more money."),
162: ("Months later, in October", "he was freed."),
307: ("Days later, the gang turned up", "placed a bag over his head."),
169: ("The final incident took place", "head covered once again."),
}
def slice_between(text, start_anchor, end_anchor, label):
i = text.find(start_anchor)
if i < 0:
raise SystemExit(f"ABORT: start anchor for {label} not found in article")
j = text.find(end_anchor, i)
if j < 0:
raise SystemExit(f"ABORT: end anchor for {label} not found after start")
return text[i:j + len(end_anchor)]
# Data problems found while matching. These are for the website database to fix;
# nothing here is applied automatically.
CORRECTIONS = [
{"target": "DB id 321", "field": "victim", "current": "Crypto manager",
"issue": "The person kidnapped was the crypto manager's mother, not the manager.",
"action": "Rename the victim to identify the mother.", "confirmed_by": "Sofia, this session"},
{"target": "DB id 307", "field": "description + notes",
"current": "description duplicates id 354 (incident 1); notes describe incident 2",
"issue": "This record is incident 4 of the Salford series: the gang returned to the "
"victim's house, took him to Egret Drive and put a bag over his head.",
"action": "Rewrite description and notes to incident 4. Its date, location, scenario "
"and flags are already correct.", "confirmed_by": "elimination across 5 sheet rows and 5 DB records"},
{"target": "DB id 258", "field": "url", "current": "https://archive.is/El9EI",
"issue": "The same archive link sits on sheet row 259, whose saved article is the "
"Val-de-Marne case (DB id 362, Europe 1). Id 258 is a Kharkiv kidnapping.",
"action": "Verify which case that snapshot belongs to and clear the wrong one.",
"confirmed_by": "URL audit"},
{"target": "sheet row 18", "field": "Scenario", "current": "Armed Robbery in Public Space",
"issue": "The article says the attack happened inside the victims' own apartment in the "
"Busca neighbourhood of Toulouse.",
"action": "DB id 266 already says Home Invasion, which is closer. Fix the sheet.",
"confirmed_by": "article text, 20 Minutes"},
{"target": "DB id 460", "field": "summary",
"current": "names the victim 'Artem Ivanov' and calls him owner of Hedonist Restaurant",
"issue": "Official sources (ANTARA carrying the Bali Police statement, Bali Times, Social "
"Expat) refer to the victim only by the initials A.I. and say he was RETURNING FROM "
"the restaurant, not that he owned it. Both the full name and the ownership claim "
"trace to a single Indonesian-language Threads.com post.",
"action": "Replace the name with 'Russian national, initials A.I., 41 years old'. Replace "
"'owner of Hedonist Restaurant' with 'was returning from Hedonist Restaurant'. "
"Note that name and ownership are unconfirmed and sourced only from social media.",
"confirmed_by": "Sofia, against ANTARA News official police statement"},
{"target": "DB id 460", "field": "url_2..url_5",
"current": "five links, none of them ANTARA",
"issue": "ANTARA News carries the official Bali Police statement and confirms details the "
"linked sources do not, including the villa key taken from the motorcycle dashboard "
"and used to enter Villa Ukulele. The record's 'Villa Ukulele' note is correct; it "
"is simply not evidenced by anything currently linked.",
"action": "Add the ANTARA article as a linked source.",
"confirmed_by": "Sofia"},
{"target": "DB id 460", "field": "money_wanted",
"current": "$4.9M to $5M in Crypto",
"issue": "No source gives $4.9M. Only Bali Discovery gives a figure at all, US$5 million "
"or about Rp 90 billion, and it attributes that to an Instagram interview. The "
"same article states: 'Police have yet to share the amount of money lost from "
"Crypto Asset Accounts owned by AI.'",
"action": "Drop the $4.9M lower bound. Record the figure as US$5M reported via an "
"Instagram interview, with no police confirmation.",
"confirmed_by": "Bali Discovery, Bali Times, BeInCrypto, all read directly"},
{"target": "DB id 460", "field": "summary",
"current": "'Four crime scenes processed: Hedonist Restaurant, abduction point in Pecatu, "
"Villa Ukulele, hospital drop-off'",
"issue": "FABRICATED LIST. Sources say police investigated four locations but none of them "
"says which four. The bulk import invented the enumeration.",
"action": "Replace with 'police processed four crime scenes; the locations were not "
"specified in reporting'.",
"confirmed_by": "Bali Discovery names the count only; no source enumerates the sites"},
{"target": "DB id 460", "field": "weapons",
"current": "null",
"issue": "No source describes a weapon; the restraints were plastic handcuffs. But police "
"are pursuing the case under the Indonesian criminal code as kidnapping, physical "
"assault AND armed robbery, which implies one. The flag and the legal "
"classification disagree.",
"action": "Decide whether the flag follows what reporting describes or what the charge "
"implies, and apply that rule consistently across cases.",
"confirmed_by": "Bali Discovery"},
{"target": "DB id 462", "field": "url_2",
"current": "YouTube video titled around an 'empresário' (businessman)",
"issue": "Not a mismatch. Brazilian outlets describe this victim variously as an influencer "
"and as a businessman. Recorded so it is not re-investigated on every future pass.",
"action": "None. Leave as linked.", "confirmed_by": "Sofia"},
{"target": "DB id 462", "field": "weapons / notes",
"current": "weapons = 1, with no qualifier",
"issue": "The flag is correct, the attackers used the weapons to intimidate. But the weapons "
"carried during the kidnapping were imitation police props; a real firearm appears "
"only later, during the police chase.",
"action": "Keep weapons = 1 and add a note recording that the weapons used in the abduction "
"were imitation.", "confirmed_by": "Sofia"},
{"target": "sheet row 252", "field": "URL",
"current": "cryptonews.com/news/french-crypto-trader-kidnapped-near-paris-...",
"issue": "Points to a French case near Paris. The article saved in that row is a Phuket "
"robbery in Thailand. Trusting this URL would have filed the article under DB id 350.",
"action": "Re-find the correct source for the Phuket case.", "confirmed_by": "URL audit + article text"},
]
FIELD_ORDER = [
"id", "date", "original_date", "year", "month", "quarter", "victim", "location",
"country", "scenario", "description", "kidnappings", "violence_torture",
"drugs_alcohol", "weapons", "theft", "life_taken", "money_wanted", "coin_type",
"reports", "notes", "has_processed_date", "created_at",
]
def norm(s):
if s is None:
return ""
s = unicodedata.normalize("NFKD", str(s))
s = "".join(c for c in s if not unicodedata.combining(c))
return re.sub(r"\s+", " ", re.sub(r"[^a-z0-9 ]", " ", s.lower())).strip()
def slug(s):
s = unicodedata.normalize("NFKD", str(s or "Unknown"))
s = "".join(c for c in s if not unicodedata.combining(c))
s = re.sub(r"[^A-Za-z0-9]+", "-", s).strip("-")
return (s[:40].rstrip("-")) or "Unknown"
def year_of(v):
try:
return int(float(v))
except (TypeError, ValueError):
return None
def load_sheet():
wb = openpyxl.load_workbook(XLSX, data_only=True, read_only=True)
ws = wb["reported_K&R"]
rows = list(ws.iter_rows(values_only=True))
idx = {h: i for i, h in enumerate(rows[0]) if h is not None}
out = []
for n, r in enumerate(rows[1:], start=2):
if not (r[idx["Victim"]] or r[idx["Date"]]):
continue
rec = {"_row": n}
for h, i in idx.items():
rec[h] = r[i]
out.append(rec)
wb.close()
return out
def articles_of(row):
out = []
for col, n in ART_COLS:
v = row.get(col)
if isinstance(v, str) and len(v.strip()) >= MIN_LEN:
out.append({"col": col, "n": n, "text": v})
return out
def build_mapping(sheet, records):
"""Unambiguous (victim, year) pairs, plus the reviewed approvals."""
s_key = defaultdict(list)
for r in sheet:
s_key[(norm(r.get("Victim")), year_of(r.get("Year")))].append(r)
j_key = defaultdict(list)
for r in records:
j_key[(norm(r.get("victim")), r.get("year"))].append(r)
mapping = {}
for k in set(s_key) & set(j_key):
if len(s_key[k]) == 1 and len(j_key[k]) == 1:
mapping[s_key[k][0]["_row"]] = j_key[k][0]["id"]
mapping.update(APPROVED)
# A DB record must not receive articles from two different sheet rows.
seen = defaultdict(list)
for row, jid in mapping.items():
seen[jid].append(row)
clashes = {j: rs for j, rs in seen.items() if len(rs) > 1}
if clashes:
raise SystemExit(f"ABORT: DB ids claimed by multiple sheet rows: {clashes}")
return mapping
def rule_for(row, jid):
return APPROVED_RULES.get(row, "exact match on victim + year, unique on both sides")
def render_fetched(entries):
"""Phase-2 blocks: articles retrieved from live sources rather than the spreadsheet."""
L = []
WITH_TEXT = ("KEEP", "PARTIAL", "UNTRIMMED")
keeps = [e for e in entries if e["verdict"] in WITH_TEXT]
others = [e for e in entries if e["verdict"] not in WITH_TEXT]
if others:
L += ["", "OTHER LINKED SOURCES"]
for e in others:
tail = f" — {e['note']}" if e.get("note") else ""
if e.get("of"):
tail = f" — syndication of {e['of']}" + (f". {e['note']}" if e.get("note") else "")
L.append(f" [{e['verdict']}] {e.get('field','')} {e.get('source')}{tail}")
L.append(f" {e.get('url')}")
for i, e in enumerate(keeps, 1):
flag = {"PARTIAL": " [PARTIAL — PAYWALLED]",
"UNTRIMMED": " [RAW EXTRACT — NOT YET TRIMMED]"}.get(e["verdict"], "")
L += ["", "-" * 96, f"FETCHED ARTICLE {i}{flag}"]
if e["verdict"] == "UNTRIMMED":
L += [" !! This is the whole page as extracted. It still contains site furniture,",
" !! and may contain teaser headlines for UNRELATED cases. Trim on read-through.",
" !! Do not quote from it without checking the passage belongs to this case."]
L += [f" Source {e['source']}",
f" URL {e['url']}",
f" Field {e['field']}",
f" Retrieved {e.get('fetched_at')} via {e['method']} (HTTP {e.get('http')})",
f" Language {e['language']}",
f" Kept paragraphs {e['paragraphs_kept']}",
f" Length {e['chars']:,} chars",
f" Integrity sha256 {e['sha256']}"]
if e.get("cut_note"):
L.append(f" Trimmed {e['cut_note']}")
if e.get("note"):
L.append(f" Note {e['note']}")
L += [" Caveat retrieved from a live page on the date above. Unlike text copied",
" from the spreadsheet, there is no second copy to hash it against.",
"-" * 96, "",
f"ORIGINAL ({e['language']}, verbatim as retrieved)", "", e["text"]]
if e.get("translation"):
L += ["", "ENGLISH TRANSLATION (derived by a model, not source text)", "",
e["translation"]]
elif e.get("translation_status") == "PENDING":
L += ["", "ENGLISH TRANSLATION — PENDING"]
return L
def render(rec, arts, notes, fetched=()):
L = []
hdr = f"CASE {rec['id']:03d} | {rec.get('victim')} | {rec.get('date')} | {rec.get('country')}"
L += ["=" * 96, hdr, "=" * 96, "", "DATABASE RECORD"]
for f in FIELD_ORDER:
L.append(f" {f:<20}{rec.get(f) if rec.get(f) is not None else '(null)'}")
ov = SUMMARY_OVERRIDES.get(str(rec["id"]))
if ov:
L += ["", "AI SUMMARY [revised on review, verified against the sources in this file. "
"Live DB still holds the shorter bulk-import summary — apply this to it.]"]
for ln in str(ov).split("\n"):
L.append(f" {ln}")
elif rec.get("summary"):
L += ["", "AI SUMMARY [generated at bulk import, NOT verified against sources]"]
for ln in str(rec["summary"]).split("\n"):
L.append(f" {ln}")
L += ["", "LINKED SOURCES"]
any_url = False
for f in ("url", "url_2", "url_3", "url_4", "url_5"):
if rec.get(f):
L.append(f" [{f}] {rec[f]}")
any_url = True
if not any_url:
L.append(" (none recorded)")
if notes:
L += ["", "NOTES ON THIS FILE"]
for n in notes:
L.append(f" * {n}")
if not arts and not fetched:
L += ["", "-" * 96, "NO ARTICLE TEXT SAVED YET", "-" * 96]
for i, a in enumerate(arts, 1):
L += ["", "-" * 96, f"ARTICLE {i}"]
L += [f" Source {a['source']}", f" URL {a['url']}",
f" Origin {a['origin']}", f" Length {len(a['text']):,} chars"]
if a.get("trimmed"):
L.append(f" Trimmed site furniture removed on review; kept text is verbatim. "
f"Full original ({len(a['full_text']):,} chars) archived, sha256 "
f"{hashlib.sha256(a['full_text'].encode()).hexdigest()}")
if a.get("excerpt"):
L += [" Excerpt verbatim paragraphs relevant to THIS case, quoted from the full text below"]
L.append("-" * 96)
# Article and excerpt are written unaltered. No rewrapping, no indenting:
# the bytes here must match the spreadsheet cell so the manifest hash verifies.
if a.get("excerpt"):
L += ["", "RELEVANT EXCERPT", "", a["excerpt"], "", "FULL ARTICLE", ""]
L.append(a["text"])
L += render_fetched(fetched)
L += ["", "=" * 96,
f"generated from attacks-export-Gart-website.json + reported_K&R | case {rec['id']:03d}",
"=" * 96, ""]
return "\n".join(L)
def main():
ap = argparse.ArgumentParser()
ap.add_argument("--all", action="store_true")
ap.add_argument("--samples", action="store_true")
args = ap.parse_args()
sheet = load_sheet()
records = json.loads(JSONF.read_text(encoding="utf-8"))
store_path = BASE / "sourced-articles.json"
sourced = json.loads(store_path.read_text(encoding="utf-8")) if store_path.exists() else {}
by_row = {r["_row"]: r for r in sheet}
mapping = build_mapping(sheet, records)
salford_text = next(a["text"] for a in articles_of(by_row[SALFORD_SOURCE_ROW]))
salford_excerpt = {
jid: slice_between(salford_text, a, b, f"id {jid}")
for jid, (a, b) in SALFORD.items()
}
for jid, exc in salford_excerpt.items():
assert exc in salford_text, jid # true by construction; kept as a tripwire
articles_for = defaultdict(list)
notes_for = defaultdict(list)
for row, jid in mapping.items():
srow = by_row[row]
for a in articles_of(srow):
entry = {
"text": a["text"],
"source": srow.get("REPORTS") or "(source not recorded)",
"url": srow.get("URL") if a["n"] == 1 else "(no URL recorded for this column)",
"origin": f'reported_K&R sheet, row {row}, column "{a["col"]}"',
}
dec = SHEET_TRIM.get(f"{jid}:{a['col']}")
if dec:
entry["full_text"] = a["text"]
entry["text"] = apply_sheet_trim(a["text"], dec)
entry["trimmed"] = True
articles_for[jid].append(entry)
notes_for[jid].append(f"matched to sheet row {row}: {rule_for(row, jid)}")
for jid, exc in salford_excerpt.items():
if jid == 307:
articles_for[jid][0]["excerpt"] = exc
notes_for[jid].append("DB description and notes are WRONG on this record: they duplicate "
"incidents 1 and 2. This record is incident 4. Flagged for correction.")
else:
articles_for[jid].append({
"text": salford_text, "excerpt": exc,
"source": by_row[SALFORD_SOURCE_ROW].get("REPORTS") or "Manchester Evening News",
"url": by_row[SALFORD_SOURCE_ROW].get("URL"),
"origin": f"reported_K&R sheet, row {SALFORD_SOURCE_ROW}, column \"Articles\" "
f"(one article documenting 5 linked incidents)",
})
notes_for[jid].append("part of a 5-incident series against one victim (ids 354, 355, 162, 307, 169)")
OUT.mkdir(exist_ok=True)
SAMPLES.mkdir(exist_ok=True)
target = SAMPLES if args.samples else OUT
wanted = {32, 307} if args.samples else None
manifest, written = [], 0
for rec in records:
if wanted and rec["id"] not in wanted:
continue
arts = articles_for.get(rec["id"], [])
fetched = sourced.get(str(rec["id"]), [])
body = render(rec, arts, notes_for.get(rec["id"], []), fetched)
name = f"{rec['id']:03d}_{slug(rec.get('victim'))}.txt"
path = target / name
path.write_text(body, encoding="utf-8")
written += 1
# Read the file back off disk and prove every article survived unaltered.
on_disk = path.read_text(encoding="utf-8")
for e in fetched:
if e["verdict"] not in ("KEEP", "PARTIAL", "UNTRIMMED"):
continue
if e["text"] not in on_disk:
raise SystemExit(f"ABORT: fetched article altered in {name} ({e['url']})")
if e.get("translation") and e["translation"] not in on_disk:
raise SystemExit(f"ABORT: translation altered in {name} ({e['url']})")
manifest.append({"case": rec["id"], "file": name, "chars": e["chars"],
"sha256": e["sha256"], "origin": f"fetched {e['url']}"})
for a in arts:
if a["text"] not in on_disk:
raise SystemExit(f"ABORT: article text altered in {name} ({a['origin']})")
if a.get("excerpt") and a["excerpt"] not in on_disk:
raise SystemExit(f"ABORT: excerpt altered in {name}")
# sha256 stays the FULL-cell hash so the phase-1 provenance check keeps verifying
# against the spreadsheet, even when the embedded copy has furniture trimmed off.
provenance = a.get("full_text", a["text"])
m = {"case": rec["id"], "file": name, "chars": len(provenance),
"sha256": hashlib.sha256(provenance.encode()).hexdigest(),
"origin": a["origin"]}
if a.get("trimmed"):
m["trimmed"] = True
m["infile_sha256"] = hashlib.sha256(a["text"].encode()).hexdigest()
m["infile_chars"] = len(a["text"])
manifest.append(m)
if not args.samples:
(BASE / "case-files-manifest.json").write_text(
json.dumps({"files": written, "articles": len(manifest), "entries": manifest},
ensure_ascii=False, indent=2), encoding="utf-8")
(BASE / "corrections-for-database.json").write_text(
json.dumps(CORRECTIONS, ensure_ascii=False, indent=2), encoding="utf-8")
r252 = by_row[252]
missing = [{
"sheet_row": 252,
"victim": r252.get("Victim"),
"date": str(r252.get("Date")),
"location": r252.get("Location"),
"country": r252.get("Country"),
"scenario": r252.get("Scenario"),
"description": r252.get("Description"),
"recorded_url": r252.get("URL"),
"url_warning": "This URL is WRONG. It points to a French case near Paris "
"(DB id 350, Alexandre). The saved article is a Phuket robbery. "
"The correct source needs to be re-found.",
"why_missing": "No record in the 364-row export matches this event. Nearest "
"Thailand case is id 204 (January 5 2025, Phuket), a different incident.",
"article_text": next((a["text"] for a in articles_of(r252)), None),
}]
(BASE / "cases-missing-from-database.json").write_text(
json.dumps(missing, ensure_ascii=False, indent=2), encoding="utf-8")
print(f"corrections logged : {len(CORRECTIONS)}")
print(f"cases absent from the database : {len(missing)}")
print(f"sheet rows matched to a DB record : {len(mapping)}")
print(f"DB records receiving article text : {len(articles_for)}")
print(f"files written : {written} -> {target}")
print(f"article bodies embedded : {len(manifest)}")
if __name__ == "__main__":
main()
merge-output/build_overrides_batch1.py
+110
View File
@@ -0,0 +1,110 @@
import json, io, sys
sys.stdout = io.TextIOWrapper(sys.stdout.buffer, encoding="utf-8", errors="replace")
PATH = __file__[:__file__.rfind("build_overrides")] + "summary-overrides.json"
existing = {}
try:
existing = json.load(open(PATH, encoding="utf-8"))
except Exception:
existing = {}
def s(*cats):
return "\n\n".join(cats)
B = {}
B["372"] = s(
"**Victims:** A woman identified only by the initials \"A.T.\", in Barrie, Ontario.",
"**Attackers:** Several assailants; the number is not recorded. All were caught.",
"**Attack Method:** She was kidnapped and tied to a chair while her captors demanded a $1 million bitcoin ransom.",
"**Violence Used:** She was stripped naked, struck in the legs with a hammer, and burned.",
"**Crypto Demanded/Stolen:** $1 million in bitcoin was demanded; the record indicates no cryptocurrency was handed over.",
"**Status:** She escaped, and the attackers were arrested.",
)
B["371"] = s(
"**Victims:** A Chinese businessman (referred to only as \"K\") who ran contract nickel-mining operations in the Philippines. He was the only known survivor among more than 100 kidnappings, most of them targeting Chinese nationals, recorded in the country that year.",
"**Attackers:** A mixed crew of local Filipino kidnappers working with a Chinese criminal syndicate led by a man known as \"Andy Lau\" and a woman known as \"Li Na\", acting on a tip from the victim's own bodyguard-driver, who had sold him out after judging him wealthy from a lavish company truck-launch event.",
"**Attack Method:** On the morning of 12 December 2022 the bodyguard let the crew ambush the car just after it left the compound; two men in construction-worker uniforms forced their way in, hooded and handcuffed him, and switched vehicles. He was held blindfolded for six days, 12-18 December, and never saw his captors' faces.",
"**Violence Used:** Stun guns, heated coils and burns, and a knife drawn across his chest, concentrated in the first two days; he later needed two surgeries for burns and shackle wounds. He stayed deliberately compliant to limit the abuse.",
"**Crypto Demanded/Stolen:** The captors opened at US$100 million and were negotiated down through US$50M and US$20M to a final figure. His wife withdrew cash under police escort and, inside a Manila casino the gang used to launder money, converted it to USDT (Tether) and transferred it to the kidnappers.",
"**Status:** He was released in a remote field in Cavite on the sixth day and reunited with his wife and police. The bodyguard was arrested the following May and gave up the ring's number two; \"Andy Lau\" and others were later detained. Key suspects remain in custody with sentencing pending.",
)
B["370"] = s(
"**Victims:** A family in Port Moody, British Columbia \u2014 a father who was a Bitcoin holder and had discussed his holdings within the local Chinese community, his wife, and their daughter.",
"**Attackers:** Four men; two first posed as Canada Post workers delivering a parcel, with two more joining once inside. One of them, Tsz Wing Boaz Chan, was later convicted.",
"**Attack Method:** On 27-28 April 2024 the fake couriers got the father to open the door, forced their way in and locked it, then bound all three family members with zip ties over about 13 hours while demanding access to his cryptocurrency.",
"**Violence Used:** Both parents were subjected to waterboarding and threatened with mutilation; the daughter was forced to undress, be filmed and repeat sexual phrases, and was sexually assaulted by one of the attackers.",
"**Crypto Demanded/Stolen:** The gang first demanded 200 BTC, then lowered it to 100 BTC, and ultimately transferred about US$1.6 million in cryptocurrency before fleeing.",
"**Status:** After the captives were wrapped in blankets and a door was closed, the daughter freed herself, escaped, and called 911. Tsz Wing Boaz Chan pleaded guilty to break-and-enter, unlawful confinement and sexual assault and was sentenced to seven years; the court described the case as one of Canada's most serious \"wrench attacks\". Details on the other suspects have not been released.",
)
B["369"] = s(
"**Victims:** Quentin Cepeljac, a Belgian barber, lured to London.",
"**Attackers:** A gang (number not recorded) that rented an Airbnb to stage the trap \u2014 a mistake that led to their quick arrest.",
"**Attack Method:** Cepeljac had bragged about being a successful crypto dealer to impress a woman; she invited him to what he took to be her luxury flat, which turned out to be a bedsit set up as a trap.",
"**Violence Used:** He was tortured and threatened.",
"**Crypto Demanded/Stolen:** The gang expected around \u00a3500,000 in crypto, but he in fact held only \u00a36.71; they settled for about \u00a32,000 taken from his bank account.",
"**Status:** Because the attackers had rented the Airbnb used for the trap, they were quickly identified and caught.",
)
B["368"] = s(
"**Victims:** Gabriel Di Noto, 54, an accountant and former Central Bank inspector and deputy manager of Banco de C\u00f3rdoba who latterly advised on crypto trading, in Villa Carlos Paz, Argentina. His 85-year-old father lived in the same cabin complex, which Di Noto owned.",
"**Attackers:** A group who arrived by motorcycle overnight, aided by a woman whom investigators believe Di Noto had met on Tinder and who opened the door to them before fleeing with them \u2014 all captured on security cameras.",
"**Attack Method:** The intruders broke into his home in the early hours, beat him, and forced access to his finances, then went on to rob his elderly father's house. Fleeing, they took Di Noto's car, leading his father to think he had been kidnapped.",
"**Violence Used:** He was left tied and gagged. According to the family's lawyer, a preliminary hypothesis — with the full autopsy results still sealed — is that he was not killed by blows, a firearm or a blade; a deeper toxicology examination was under way into whether a heart attack or an ingested substance caused his death.",
"**Crypto Demanded/Stolen:** The attackers emptied his accounts and took out large fraudulent loans in his name, moving the money to their own accounts; no single figure is recorded.",
"**Status:** Di Noto was found dead, tied and gagged, inside one of his cabins. The investigation was continuing, with autopsy results pending; a woman was seen on security cameras leaving with the attackers.",
)
B["367"] = s(
"**Victims:** A 35-year-old man in Sofia, Bulgaria.",
"**Attackers:** Two men posing as police officers; both were arrested about two months later.",
"**Attack Method:** The pair abducted him and drove him around while holding a gun to his head for about an hour, demanding he transfer 14 bitcoin within 24 hours.",
"**Violence Used:** He was held at gunpoint throughout.",
"**Crypto Demanded/Stolen:** They demanded 14 bitcoin but obtained none; they did take four of his debit cards.",
"**Status:** The victim was released, and the two men were arrested two months later.",
)
B["365"] = s(
"**Victims:** An unidentified man who had been hosting a cryptocurrency event at a business earlier that evening.",
"**Attackers:** Three teenagers, with a possible fourth person directing them by phone.",
"**Attack Method:** As he returned home, the three approached him and forced him into a car at gunpoint, then drove him to a remote desert area about an hour outside the city.",
"**Violence Used:** He was held at gunpoint.",
"**Crypto Demanded/Stolen:** They took about $4 million in cryptocurrency and NFTs.",
"**Status:** The investigation was continuing; no arrests are recorded here.",
)
B["364"] = s(
"**Victims:** An undisclosed man in central Limassol, Cyprus, who had arranged to buy cryptocurrency in person.",
"**Attackers:** Two men who set up the meeting \u2014 one carried out the robbery while the other kept watch. A 31-year-old was arrested; the man who fled with the cash was still being sought.",
"**Attack Method:** On Christmas Eve 2024 the victim came to a noon meeting carrying \u20ac100,000 in cash to buy crypto; as he waited in his car, one man ran up, struck him about the face, grabbed the backpack of cash, and fled on foot.",
"**Violence Used:** He was hit across the head and face in the daylight robbery.",
"**Crypto Demanded/Stolen:** No cryptocurrency changed hands; the robbers took \u20ac100,000 in cash.",
"**Status:** The victim detained the lookout until police arrived, leading to the 31-year-old's arrest; Limassol CID was interviewing witnesses and pursuing the second suspect and possible accomplices.",
)
B["362"] = s(
"**Victims:** A mother and her two children in Val-de-Marne, France; the intended target was her husband, an independent cryptocurrency investor.",
"**Attackers:** Two masked individuals.",
"**Attack Method:** On a Tuesday afternoon around 1 October 2025 the two masked men approached the mother and children and handed her a mobile phone \u2014 a Samsung with a prepaid SIM \u2014 to pass to her husband, threatening to harm the family if he did not answer the calls.",
"**Violence Used:** Threats to harm the family; no physical violence was reported.",
"**Crypto Demanded/Stolen:** Nothing was taken; the phone was intended to open an extortion demand against the crypto-investor husband.",
"**Status:** When the husband returned home his wife gave him the phone, which rang four times; instead of answering he went to the police, handed the phone to investigators, and local police placed the home under surveillance.",
)
B["353"] = s(
"**Victims:** The operators of a cryptocurrency mining farm running on the warehouse premises of the VkusVill retail chain in the village of Kuchino, near Moscow; the on-site guards were also targeted.",
"**Attackers:** Four unknown masked men.",
"**Attack Method:** In July 2022 the four entered the warehouse, threatened the guards with weapons and handcuffed them, then cleared out the equipment.",
"**Violence Used:** The guards were threatened with weapons and handcuffed; no injuries were reported.",
"**Crypto Demanded/Stolen:** They took four containers holding 100 graphics cards (mining hardware) and also stole the surveillance-recording storage to cover their tracks.",
"**Status:** Police were searching for the perpetrators, who face up to 12 years in prison.",
)
existing.update(B)
json.dump(existing, open(PATH, "w", encoding="utf-8"), ensure_ascii=False, indent=2)
print("wrote", len(B), "summaries; file now has", len(existing), "entries")
for k in sorted(B, key=int):
print(f" {k}: {len(B[k])} chars")
merge-output/build_overrides_batch2.py
+105
View File
@@ -0,0 +1,105 @@
import json, io, sys
sys.stdout = io.TextIOWrapper(sys.stdout.buffer, encoding="utf-8", errors="replace")
PATH = __file__[:__file__.rfind("build_overrides")] + "summary-overrides.json"
existing = json.load(open(PATH, encoding="utf-8"))
def s(*cats):
return "\n\n".join(cats)
B = {}
B["350"] = s(
"**Victims:** Alexandre, a 35-year-old former cryptocurrency trader in the Paris area.",
"**Attackers:** Unidentified kidnappers; no arrests had been made and police said there were no strong leads at the time of reporting.",
"**Attack Method:** He was abducted and held captive between Paris and Saint-Germain-en-Laye. Police opened an investigation on the Tuesday night after a contact of his in Algeria received a photo of him on his knees with his hands tied; his phone was geolocated to Paris's 10th arrondissement.",
"**Violence Used:** He was strangled during his confinement and found with facial swelling and injuries; forensic technicians later collected traces from his clothing and skin.",
"**Crypto Demanded/Stolen:** The kidnappers demanded a \u20ac10,000 ransom from his Algerian contact; the contact refused and alerted police, and no ransom was paid.",
"**Status:** He was released and found walking home around 4:00 a.m. on the Wednesday, recognised by anti-crime squad officers who described him as \"shocked\". Reported as roughly the tenth crypto-related kidnapping in France in recent months; the case remained at an early investigative stage.",
)
B["349"] = s(
"**Victims:** A 31-year-old man (using the pseudonym \"Valeri\") who ran a small, illegal bitcoin-mining operation out of a garage in Abkhazia.",
"**Attackers:** Unidentified thieves who struck overnight while the premises were unoccupied.",
"**Attack Method:** He arrived one autumn morning to find the garage door busted open and the place cleared out; the theft was part of a wave of mining-rig burglaries across Abkhazia after the territory banned power-intensive mining in 2020.",
"**Violence Used:** None in this incident \u2014 an unoccupied-premises break-in with no confrontation (the wider wave included violent, armed raids elsewhere, but not here).",
"**Crypto Demanded/Stolen:** The thieves took 20 mining servers worth about $10,000.",
"**Status:** Because mining is illegal in Abkhazia he could not turn to the police; he tried to track the thieves himself without success and lacked the money to rebuild the operation.",
)
B["340"] = s(
"**Victims:** Sergei Domogatskii, a popular Russian influencer in Bali, who said he was targeted by compatriots.",
"**Attackers:** By his account, two men in black ski masks carried out the abduction, with three more perpetrators arriving later; one of the assailants was alleged to be another Russian.",
"**Attack Method:** Around 10:30 p.m., as he rode a motorcycle near Sanur Beach, an Alphard car stopped in front of him and two masked men forced him inside, then took him to a house in the Jimbaran area of South Kuta.",
"**Violence Used:** He said he was beaten and tased, and sustained injuries to his right arm.",
"**Crypto Demanded/Stolen:** He was forced to hand over his phone and transfer about US$4,600 in cryptocurrency; the three later arrivals then demanded a US$1 million ransom, which he could not pay.",
"**Status:** He was released several hours later in a field near the Apurva Kempinski Hotel in South Kuta and gave a statement to Bali Police (spokesperson Sr. Comr. Ariasandy); the account is his as reported to police.",
)
B["334"] = s(
"**Victims:** An unnamed businessman from S\u00e3o Paulo, lured to Goi\u00e2nia, Brazil. He survived.",
"**Attackers:** A four-man scheme \u2014 mastermind Josemar Alencar Linhares de Oliveira (who posed as an advisor to the president of the Goi\u00e1s Legislative Assembly), the driver Gabriel Pires de Lima (alias \"Danilo\", who pretended to be a fellow victim), a gunman hidden in the car's trunk, and a third armed man who joined mid-journey.",
"**Attack Method:** Planning began in February; Josemar arranged a business meeting and even offered to cover the victim's stay. The victim arrived on 24 June; soon after leaving the hotel, a man sprang from the trunk into the back seat and subdued him at gunpoint, and a third armed man joined. They rifled his suitcase and accessed his bank accounts and digital wallets on his phone.",
"**Violence Used:** He was punched in the head, held with a gun to his head and ribs, and threatened with death; ultimately he was thrown from the moving car at about 30 km/h, fracturing three ribs and suffering internal bleeding before a passing truck driver rescued him.",
"**Crypto Demanded/Stolen:** The gang aimed for 2\u20134 million reais in cryptocurrency but the victim could not access his wallet on the spot; they obtained only R$6,813.28 via Pix.",
"**Status:** After about 90 minutes a police chase on the GO-020 highway ended with two suspects (Gabriel Pires de Lima and Tiago Oliveira Rocha) killed and one escaping unidentified. Josemar fled to the USA on 30 June and was arrested on arrival; he was convicted as the intellectual author and sentenced to 12 years and 9 months.",
)
B["323"] = s(
"**Victims:** A crypto investor in Las Vegas who had been hosting a cryptocurrency event at a business in Downtown Las Vegas earlier that night.",
"**Attackers:** Three teenagers \u2014 Belal Ashraf and Austin Fletcher, both 16 and from Pasco County, Florida, plus a third teenager who had since left the United States \u2014 with a fourth person appearing to direct them by speakerphone. Ashraf and Fletcher were certified as adults and charged with robbery, kidnapping and extortion.",
"**Attack Method:** In November, after the event, the victim returned to his apartment complex; the three approached and forced him into the back seat of their vehicle at gunpoint, put a towel over his head and told him not to look at them, then drove him more than 70 miles across the Nevada border to White Hills, Arizona.",
"**Violence Used:** He was held at gunpoint and hooded, and told he would live if he complied but that they had his father and would kill him if he did not.",
"**Crypto Demanded/Stolen:** They forced his passwords and account access and took about $4 million in cryptocurrency and NFTs.",
"**Status:** Released in the Arizona desert, he walked about five miles alone to a gas station and called a friend. Investigators (with FBI assistance) tracked a suspect vehicle from Florida; Ashraf was released on electronic monitoring and Fletcher's bail set at $4 million, while the third teenager remained abroad. (This appears to be the same incident recorded separately as case 365.)",
)
B["322"] = s(
"**Victims:** A French man in his fifties, the father of a cryptocurrency entrepreneur whose company is based in Malta and France, in Paris.",
"**Attackers:** An organised gang; four suspects were arrested and taken into custody.",
"**Attack Method:** He was abducted around 10:30 a.m. on the Thursday in the 14th arrondissement of Paris and held for two days; the apartment where he was kept was reportedly being sealed off, probably to film staged hostage videos.",
"**Violence Used:** One of his fingers was severed.",
"**Crypto Demanded/Stolen:** The kidnappers demanded a transfer of between \u20ac5 million and \u20ac7 million for his release.",
"**Status:** He was freed on the Saturday night in Palaiseau (Essonne) during a police operation coordinated by the BIS with the BRB and the criminal brigade; four suspects were in custody and an organised-gang kidnapping and extortion investigation was opened.",
)
B["321"] = s(
"**Victims:** A retired schoolteacher in Recife, Brazil \u2014 the mother of a man who works in cryptocurrency management and lives in Portugal. (The DB victim field labels this case for the son; the person actually kidnapped was his mother.)",
"**Attackers:** A gang with at least two men in the car; four people were later arrested, including two women alleged to have received part of the ransom in crypto. They used a vehicle with a cloned licence plate and were charged with extortion through kidnapping and money laundering.",
"**Attack Method:** The gang monitored the son's social media daily, judged the family wealthy, and mapped the mother's home and routines. On 21 March 2025 they followed her to the Forum Desembargador Benildes de Souza Ribeiro courthouse in Imbiribeira and seized her as she left, taking her to Olinda.",
"**Violence Used:** She was held captive for more than 12 hours at gunpoint.",
"**Crypto Demanded/Stolen:** Her son was forced to pay five bitcoins, worth about R$3.3 million at the time.",
"**Status:** She was released near the Ouro Preto neighbourhood in Olinda. All four arrest and home-search warrants were served \u2014 two suspects arrested in Abreu e Lima and Olinda and two in Extremoz (RN).",
)
B["317"] = s(
"**Victims:** A 59-year-old Johor businessman, abducted outside his home in Iskandar Puteri, Malaysia.",
"**Attackers:** An organised operation split into planning/execution, item-disposal and ransom-handling groups; police named 11+ suspects \u2014 locals plus three Vietnamese (two men and a woman in their 30s), aged 23\u201358, several with prior records \u2014 with one still at large. Police declined to comment on a possible family tie between a suspect and the victim.",
"**Attack Method:** He was seized at 5 a.m. on 13 October 2024 outside his home as he prepared to take a ride-hailing car to Senai International Airport for a business trip.",
"**Violence Used:** From the suspects police seized a Beretta pistol, 250 live rounds and a pair of handcuffs.",
"**Crypto Demanded/Stolen:** The kidnappers first sought RM30 million, lowered to RM20 million after negotiation, reportedly paid; police recovered RM7.2 million of it \u2014 RM1.95 million cash, S$1 million (RM3.3 million) in foreign currency, and 400,000 USDT (about RM1.75 million).",
"**Status:** The victim was released after the ransom. Police arrested 10 men and three women and extended their remand, seized the firearm and ammunition, and were still seeking one suspect; the case is being pursued under Section 3(1) of the Kidnapping Act 1961.",
)
B["315"] = s(
"**Victims:** An undisclosed Bitcoin holder in S\u00f6dert\u00e4lje, Sweden \u2014 one of the well-known Swedish crypto figures targeted at home, as flagged by crypto proponent Eric Wall citing Swedish outlets LT and Aftonbladet.",
"**Attackers:** Masked, armed men; the number involved in this incident was not specified.",
"**Attack Method:** A home invasion, part of a pattern in which criminals identify Bitcoin holders through social media (often striking shortly after a victim discusses crypto publicly) and through Sweden's public-access laws that expose home addresses and tax records.",
"**Violence Used:** The victim was tied up and physically abused to force access to their Bitcoin.",
"**Crypto Demanded/Stolen:** The target was the victim's Bitcoin holdings; no amount was disclosed.",
"**Status:** Reported second-hand via Eric Wall and Swedish media rather than a detailed case report; Cointelegraph had asked the Swedish Police Authority for details and any arrests. (Source is a round-up article; case-specific detail is limited.)",
)
B["312"] = s(
"**Victims:** An unnamed Israeli cryptocurrency entrepreneur, robbed in his apartment in Tel Aviv; he later left the country and was left nearly penniless.",
"**Attackers:** Robbers who broke into his home; the number was not specified and no arrests were reported.",
"**Attack Method:** About two weeks before mid-June 2023, the robbers forced their way into his Tel Aviv apartment and made him transfer his crypto holdings to wallets they controlled.",
"**Violence Used:** He was beaten severely and held at gunpoint; afterward a severed animal head and a hateful graffiti message were left near his door.",
"**Crypto Demanded/Stolen:** He was forced to transfer all of his cryptocurrency, but the platform and wallet providers froze the transfers and conversions as suspicious, so neither the robbers nor the victim retained access; the amount was not disclosed.",
"**Status:** He reported the robbery to police and left Israel; the Israel Police opened an investigation into the severed-animal-head and graffiti incident.",
)
existing.update(B)
json.dump(existing, open(PATH, "w", encoding="utf-8"), ensure_ascii=False, indent=2)
print("wrote", len(B), "summaries; file now has", len(existing), "entries")
for k in sorted(B, key=int):
print(f" {k}: {len(B[k])} chars")
merge-output/build_overrides_batch3.py
+105
View File
@@ -0,0 +1,105 @@
import json, io, sys
sys.stdout = io.TextIOWrapper(sys.stdout.buffer, encoding="utf-8", errors="replace")
PATH = __file__[:__file__.rfind("build_overrides")] + "summary-overrides.json"
existing = json.load(open(PATH, encoding="utf-8"))
def s(*cats):
return "\n\n".join(cats)
B = {}
B["309"] = s(
"**Victims:** An unidentified woman, a cryptocurrency investor in Dubai, UAE.",
"**Attackers:** A four-man gang of Asian expats, one of whom worked as her driver and knew she was a crypto investor and drew in the other three; all four were convicted.",
"**Attack Method:** The driver lured her into a bogus deal, posing as wanting to buy digital currency, and had her come to a spot in Dubai Investments Park, where a group approached her and demanded she transfer her money to their account.",
"**Violence Used:** She was assaulted, electrocuted, stripped naked and photographed for blackmail, then left on a street for several hours with her hands tied and a plastic bag over her face.",
"**Crypto Demanded/Stolen:** They robbed her of Dh42,000 and converted the cash into bitcoin.",
"**Status:** She ran to police; CID tracked the gang via CCTV and recovered her clothes, an electric-shock device and the nude clips from their homes. The four were sentenced to three years, fined Dh42,000 and ordered deported after their sentences.",
)
B["308"] = s(
"**Victims:** An unnamed 23-year-old member of the Saudi Arabian royal family, who reportedly traded digital assets, in the Melbourne area of Australia.",
"**Attackers:** Catherine Colivas, a 24-year-old Australian TikTok influencer who lured him, together with three men who ambushed him. Colivas pleaded guilty.",
"**Attack Method:** In February 2023 Colivas met the man for drinks; when he offered to drive her home, three men jumped him and drove him off against his will, later returning him to his own home.",
"**Violence Used:** He was bound with zip ties and threatened with having his fingers cut off; the case also involved a weapon (Colivas was convicted of recklessly causing injury and gun possession).",
"**Crypto Demanded/Stolen:** The kidnappers demanded a $20,000 ransom, and he transferred $40,000 in Bitcoin to their accounts; they also stole several luxury items from his home before releasing him.",
"**Status:** He was driven home and released. Colivas pleaded guilty to kidnapping, extortion, recklessly causing injury, theft and gun possession; on 16 December 2024 she received only a community corrections order (avoiding jail, having faced up to 25 years), citing her mental condition and upbringing.",
)
B["307"] = s(
"**Victims:** A vulnerable man in the Salford / Irlam area of Greater Manchester, repeatedly targeted by a cryptocurrency gang that had used him to acquire hundreds of thousands of pounds in crypto. This record is the fourth in a series of incidents against him (see the related Salford cases).",
"**Attackers:** Members of a seven-man crypto gang later convicted of the campaign \u2014 Jonathan Newns, David Povey, Luke Johnson, Gary Edwards, Kane Godiff, Karl Johnson and Scott Armstrong.",
"**Attack Method:** In this fourth incident, days after an October captivity, the gang came to the victim's house again demanding more money and took him to an address on Egret Drive in Irlam \u2014 where police would later find him \u2014 placing a bag over his head.",
"**Violence Used:** In this incident he was taken from his home and had a bag placed over his head; across the wider months-long campaign he was also drugged (with morphine on one occasion), deliberately burnt, beaten with weapons, bound with cables and locked in a cupboard.",
"**Crypto Demanded/Stolen:** The gang repeatedly forced him to hand over cryptocurrency, having used him to acquire hundreds of thousands of pounds' worth; on an earlier occasion he was released only after paying over \u00a3100,000.",
"**Status:** He was eventually found at the Egret Drive flat on 2 December after an anonymous tip and begged officers, \"can you take me with you?\" In January 2025 the seven men were convicted and jailed for more than 76 years between them. (The DB description and notes on this record wrongly duplicate incidents 1 and 2 and are flagged for correction.)",
)
B["304"] = s(
"**Victims:** A middle-aged couple in north Richmond, British Columbia, Canada.",
"**Attackers:** Multiple armed suspects, some impersonating police officers; one man, 34-year-old Jin Da Xing of Richmond, was charged with 11 offences.",
"**Attack Method:** On 13 September 2022, according to Richmond RCMP, multiple armed suspects — some of them impersonating police — allegedly entered the couple's home.",
"**Violence Used:** The couple were allegedly assaulted, bound and held for several hours; RCMP said they suffered non-life-threatening injuries but were left badly shaken.",
"**Crypto Demanded/Stolen:** The suspects fled with $10 million in cryptocurrency and several luxury items; a large portion of the crypto was later recovered.",
"**Status:** A year-long Richmond RCMP investigation (Serious Crime and Economic Crime units, with the National Crypto Support Unit) led to 11 charges against Jin Da Xing \u2014 including break and enter, robbery with a weapon, unlawful confinement, use of an imitation firearm, three counts of assault, extortion, possession of stolen property and impersonating a police officer. He is remanded awaiting trial.",
)
B["303"] = s(
"**Victims:** An Asian investor in the Mankhool area of Dubai, UAE. A friend who had suggested the investment and passed on the 'broker' contact was also robbed and is treated by the court as a second victim.",
"**Attackers:** A group who set up a fake Bitcoin deal \u2014 a broker who came to the victim's home to inspect the cash, and two men who then forced their way in and carried out the robbery; two people were later jailed.",
"**Attack Method:** In July 2022 the broker came to the investor's home, checked the cash he wanted to use to buy Bitcoin, and left promising to return with a seller; he then phoned to say the seller was hesitating, and moments later two men knocked, forced their way in and immobilised the victim.",
"**Violence Used:** He was assaulted and physically restrained, and the robbers threatened to kill him.",
"**Crypto Demanded/Stolen:** No cryptocurrency changed hands; the robbers took a bag containing Dh183,000 in cash along with three phones, documents and bank cheques.",
"**Status:** The Dubai Criminal Court convicted two people, sentencing them to three years, fining them the stolen amount and ordering deportation after their sentences.",
)
B["301"] = s(
"**Victims:** The owner of an aluminium factory in the West Meru industrial area near Klang, Malaysia; the on-duty security personnel were also targeted.",
"**Attackers:** A group of robbers; twelve men (including one Indonesian) were arrested in nine raids, and three more remained at large (Tan Jian Farn alias 'Q-Peng', 37; Herman Petrus, 41; and Abdul Rahim Mohamad Ali, 33). All the local suspects had prior criminal and drug records, while the arrested Indonesian had none.",
"**Attack Method:** The factory was broken into and robbed early in the morning across two incidents, on 27 April and 20 May 2022; the robbers tied up the security guards.",
"**Violence Used:** The security personnel were tied up; no injuries were reported.",
"**Crypto Demanded/Stolen:** The robbers stole 180 bitcoin mining machines (ASICs) \u2014 not bitcoin itself \u2014 a loss put at hundreds of thousands of ringgit.",
"**Status:** Twelve men were arrested on 26\u201327 May and remanded for five days; cars, computers, phones and mining machines were seized, and police said the arrests solved three bitcoin-machine robbery cases in the area. Three suspects were still being sought; the case was opened under Section 395/397 of the Penal Code.",
)
B["299"] = s(
"**Victims:** Four separate cryptocurrency investors mugged on the street in the City of London, in cases drawn from anonymised City of London police reports obtained by the Guardian.",
"**Attackers:** Various street muggers and small gangs operating opportunistically.",
"**Attack Method:** The muggings combined physical force with digital knowhow \u2014 seizing victims' phones and forcing them to unlock crypto apps (by facial or fingerprint verification) or exploiting PINs the thieves had watched them enter. One victim was targeted while ordering an Uber near Liverpool Street; another was lured down an alley under the guise of a drug deal and held against a wall; a third, while ill under a bridge, was forced to unlock his phone by fingerprint; a fourth had his phone and cards pickpocketed after the pub.",
"**Violence Used:** Physical force and coercion \u2014 forced phone handovers, being held against a wall and forced biometric unlocks.",
"**Crypto Demanded/Stolen:** The four losses were about \u00a35,000 in ethereum (from a Coinbase account), \u00a36,000 in ripple, \u00a328,700 (including cryptocurrency), and \u00a310,000 from a Crypto.com account.",
"**Status:** The incidents (second half of 2021) were disclosed via a freedom-of-information request; police described such one-off street crimes as a new challenge and were expanding officer training and public-awareness efforts.",
)
B["298"] = s(
"**Victims:** The unidentified owner of a Bitcoin trading company in the Al Nakhil area of Dubai, UAE, assaulted at his workplace.",
"**Attackers:** A gang of nine, all later identified, arrested and convicted.",
"**Attack Method:** In April 2022 the nine robbers knocked on the door of the company's headquarters, entered, attacked the owner and took the cash by force. (This was a workplace robbery, not an abduction.)",
"**Violence Used:** He was assaulted during the robbery.",
"**Crypto Demanded/Stolen:** They stole Dh4,120,000 in cash from the Bitcoin trading company; no cryptocurrency itself was taken.",
"**Status:** Police identified and arrested all nine; the Dubai Criminal Court sentenced them to three years followed by deportation.",
)
B["297"] = s(
"**Victims:** A bitcoin trader in Dubai, UAE; the cash stolen belonged to his trading partner, who is a second victim in the case.",
"**Attackers:** Four Asian men who had entered the country illegally and fled afterward; all were caught, confessed, and were jointly fined.",
"**Attack Method:** In March 2022 a group came to his residence claiming his 'address was incorrect'; when he tried to close the door they pushed in, he fell, and they put a knife to his neck, tied him with plastic rope, took the safe key from under a table and emptied the safe.",
"**Violence Used:** A knife was held to his neck and he was tied up with plastic rope; he was not otherwise injured.",
"**Crypto Demanded/Stolen:** No cryptocurrency was taken; the robbers took Dh1.7 million in cash from a safe belonging to his trading partner.",
"**Status:** He freed himself and alerted his partner and police; investigators found the men had illegally infiltrated the country and fled, then caught them in a coordinated operation. They confessed and were jointly fined Dh1.7 million.",
)
B["296"] = s(
"**Victims:** A woman in Dubai, UAE, who wanted to buy Bitcoin for Dh300,000 and went to meet the seller with two friends.",
"**Attackers:** A gang of four \u2014 two men who carried out the robbery with an axe and two others who kept watch; all four were convicted.",
"**Attack Method:** She went to Al Nahda to meet the supposed seller; while the group waited, two men approached carrying an axe, threatened to harm them, and seized the bag of money and other valuables, then escaped by car.",
"**Violence Used:** They were threatened with an axe; no injuries were reported.",
"**Crypto Demanded/Stolen:** No Bitcoin changed hands; the robbers took a bag holding Dh300,000 in cash plus other valuables.",
"**Status:** A passer-by heard the women's cries and noted the getaway car's plate; Dubai Police arrested a suspect the women identified, and he led officers to the others. The four were charged with robbery, sentenced to one year in jail followed by deportation, and fined Dh342,188, with the verdict open to appeal within 15 days.",
)
existing.update(B)
json.dump(existing, open(PATH, "w", encoding="utf-8"), ensure_ascii=False, indent=2)
print("wrote", len(B), "summaries; file now has", len(existing), "entries")
for k in sorted(B, key=int):
print(f" {k}: {len(B[k])} chars")
merge-output/build_overrides_batch4.py
+105
View File
@@ -0,0 +1,105 @@
import json, io, sys
sys.stdout = io.TextIOWrapper(sys.stdout.buffer, encoding="utf-8", errors="replace")
PATH = __file__[:__file__.rfind("build_overrides")] + "summary-overrides.json"
existing = json.load(open(PATH, encoding="utf-8"))
def s(*cats):
return "\n\n".join(cats)
B = {}
B["293"] = s(
"**Victims:** An unidentified family in Sukhumi, the capital of Abkhazia.",
"**Attackers:** Two masked men; police made one arrest.",
"**Attack Method:** The two broke into the family's home and held them at gunpoint \u2014 part of a wave of burglaries targeting the region's illegal crypto-mining operations after Abkhazia's 2020 mining ban. (The family was held in the home, not abducted.)",
"**Violence Used:** The family was held at gunpoint; no injuries were reported.",
"**Crypto Demanded/Stolen:** The men escaped with three mining servers and 150,000 roubles (about $2,040) in cash.",
"**Status:** Police made one arrest in connection with the raid.",
)
B["292"] = s(
"**Victims:** A cryptocurrency miner in Tomsk, Russia.",
"**Attackers:** Two Tomsk residents. One was tracked down and detained in St. Petersburg and pleaded guilty; the second was arrested later. Both are in custody and charged with especially large-scale group robbery.",
"**Attack Method:** In October 2021 the pair attacked the miner as he was leaving home; one threatened him with an object resembling a gun and forced him back inside his apartment, where the accomplice joined and they made him log into his crypto exchange account.",
"**Violence Used:** He was threatened with a gun-like object and forced back into his home.",
"**Crypto Demanded/Stolen:** They forced him to transfer 86 BTC from a wallet holding 90 BTC (it is unclear why they left the rest) \u2014 worth more than 360 million roubles, over US$4.8 million, at the time.",
"**Status:** Both men are charged with robbery by a group on an especially large scale and face up to 15 years and a fine of up to 1 million roubles; the case goes to the Kirovsky Court of Tomsk. The suspect caught in St. Petersburg returned 35 million roubles (about $479,000).",
)
B["290"] = s(
"**Victims:** Three women in Dubai, UAE \u2014 one of whom had agreed to buy cryptocurrency for Dhs300,000 and brought two friends to the meeting.",
"**Attackers:** A gang of four (described in the report as African, one a fugitive); all were convicted.",
"**Attack Method:** An man offered one of the women Bitcoin for Dhs300,000 and arranged to meet in Al Nahda; after the three women waited in a car, four men surprised them and ordered them to hand over the money.",
"**Violence Used:** The women were threatened with weapons (the conviction was for robbery at knifepoint; the victims described being menaced with blunt objects); no injuries were reported.",
"**Crypto Demanded/Stolen:** No Bitcoin changed hands; the robbers seized a bag holding Dhs300,000, a second bag holding Dhs63,000, other valuables and the women's passports, then fled by car.",
"**Status:** A driver waiting in one of the women's cars noted the getaway plate; police identified a suspect the victims recognised, arrested him, and he led them to two others. The four were sentenced to one year in jail, fined Dhs342,000, and ordered deported.",
)
B["288"] = s(
"**Victims:** The father (surname Ghershony; first name withheld) of Bethesda, Maryland, a cryptocurrency investor whose son was a partner on their joint account.",
"**Attackers:** His son, Liam Ghershony, 24, who was in the grip of severe benzodiazepine, Adderall and cocaine addiction and had been advising his father on crypto.",
"**Attack Method:** After a day of moving furniture into his father's loft and dinner out, Liam served him tea spiked with a large dose of benzodiazepine, presented as an energy boost; once his father was unconscious he used the man's phone to clear the two-step authorisation on the account.",
"**Violence Used:** The benzodiazepine dose, large enough to knock out a non-addict, left the father unresponsive on his floor for two days; he was hospitalised for four days with severe dehydration and acute organ dysfunction.",
"**Crypto Demanded/Stolen:** Liam moved $400,000 of bitcoin to an account he controlled and converted two-thirds of it to Ethereum, leaving notes promising his father \"the best retirement\".",
"**Status:** His mother reported him for \"dosing\" his father. Initially charged with attempted murder, he was found to have had no intent to kill; he pleaded guilty to first-degree assault, served 125 days in jail plus two months of residential drug and mental-health treatment, with 20 years of suspended time, and entered recovery.",
)
B["285"] = s(
"**Victims:** Dillon Attard, 27, a cryptocurrency holder in Sliema, Malta.",
"**Attackers:** Luke Milton, a 25-year-old company director charged with misappropriation and fraud, cryptocurrency theft, money laundering and breaches of the Virtual Financial Assets Act (pleading not guilty); a business partner of Milton's also featured in the lead-up.",
"**Attack Method:** The two met for lunch at a Sliema restaurant after Milton sought Attard's help with a small (\u20ac5,000) blockchain investment; when Attard handed his phone across the table for Milton to scan his wallet barcode, Milton allegedly pressed 'maximise', 'send' and 'confirm' in seconds while acting normally.",
"**Violence Used:** None \u2014 this was a sleight-of-hand fraud, not a violent attack.",
"**Crypto Demanded/Stolen:** About 424,671 Unizen tokens, worth roughly $700,000, were allegedly siphoned to another wallet in an irreversible transfer.",
"**Status:** Attard snatched his phone back and alerted two police-officer friends; when police arrived Milton allegedly admitted sending the transaction but blamed Attard. The episode was caught on restaurant CCTV; Milton is charged and the case continues.",
)
B["279"] = s(
"**Victims:** A Ho Chi Minh City businessman and bitcoin investor (referred to in the record as Le Duc Nguyen), together with his wife, children and brother-in-law, who were seized with him.",
"**Attackers:** A group led by businessman Ho Ngoc Tai (32) that included two serving HCMC police officers (Nguyen Quoc Dung, 40, and Nguyen Anh Tuan, 28) and around 15 others, plus a hired private detective who mapped the family's routines. Tai's group blamed the victim's advice for their own 2018 crypto losses and plotted to take his bitcoin.",
"**Attack Method:** After a staged motorbike-into-car 'accident' on 12 May 2020 failed (the victim drove off), the group learned his family was travelling from Bao Loc to HCMC and intercepted the car at Dau Giay, Dong Nai, on 17 May.",
"**Violence Used:** The victim and his brother-in-law were threatened with a fake gun; his wife and children were put in another car and menaced with a syringe of supposed HIV-infected blood (actually red ink); over the two-hour drive back to the city he was beaten and forced to call his brother to move 1,000 bitcoins.",
"**Crypto Demanded/Stolen:** The gang demanded 1,000 bitcoins; investigators found 168 bitcoins (about VND37 billion / US$1.63 million) and other property were actually taken.",
"**Status:** The family was dropped by a road in District 2, their phones and cameras taken to destroy evidence, and they reported it to police. The culprits were arrested in June 2020; two police officers and 15 others face robbery charges carrying up to life imprisonment, with no trial date set.",
)
B["273"] = s(
"**Victims:** Kieran Hamilton (\"Kez\"), 21, a self-taught cryptocurrency trader in Manchester who had posted his newly lavish lifestyle across Instagram and Twitter.",
"**Attackers:** Two machete-wielding men who, he believes, targeted him after local rumours \u2014 amplified by his online presence \u2014 painted him as a cash-rich drug dealer.",
"**Attack Method:** One night, woken by noises, he went downstairs in his boxers and was confronted by the two men, who screamed at him to hand over money, drugs and watches and ordered him to empty a safe and flip his mattress (he had none of what they expected).",
"**Violence Used:** He was stabbed, describing the scene afterwards as looking \"like a massacre\".",
"**Crypto Demanded/Stolen:** No cryptocurrency was taken; the attackers made off with his dog (worth about \u00a31,000), his Apple MacBook, gold bracelets and a gold wedding ring.",
"**Status:** Recounted by the victim as a first-person account; no arrest is recorded in the source.",
)
B["272"] = s(
"**Victims:** An unidentified cryptocurrency miner, a resident of the Podilsky district of Kyiv, Ukraine.",
"**Attackers:** Two brothers, born in 1988 and 1984, later detained.",
"**Attack Method:** In March 2018 the pair waited near his home, put a sack over his head, forced him into a car and drove him out of the city.",
"**Violence Used:** They threatened to kill him and used that to obtain his apartment keys and details of where he kept his money.",
"**Crypto Demanded/Stolen:** They took $50,000 from him.",
"**Status:** He was driven to Brovary and released. About eight months later the Kyiv prosecutor's office and national police detained the two brothers, charging them with especially large-scale robbery by prior conspiracy (Article 187(4)); they face up to 15 years with confiscation of property, and a petition was filed to hold them in custody.",
)
B["271"] = s(
"**Victims:** The occupants of a home on Ballouville Road in Killingly, Connecticut \u2014 a female renter who recognised the intruders and other occupants, including a child.",
"**Attackers:** Two Rhode Island women \u2014 Monique Delannoy-Jodoin, 59, of Manville (already under investigation for narcotics sales through the postal system), and Beatriz Viruet, 38, of Providence \u2014 both arrested and charged.",
"**Attack Method:** In March 2018 the two reportedly forced their way into the home. Police said the dispute stemmed from a bitcoin account the female victim had opened in Delannoy-Jodoin's name; Delannoy-Jodoin wanted the passwords and money she said had been stolen from her.",
"**Violence Used:** They pistol-whipped one occupant on the head and used an electric cattle prod on another; the renter was chased into a bathroom, which a suspect tried to break into with a hammer before she escaped to a neighbour's, and one suspect was heard telling the other to \"shoot the victims\".",
"**Crypto Demanded/Stolen:** The dispute centred on the contested bitcoin account and its passwords; the intruders also stole money, cell phones and a television.",
"**Status:** Both were arrested and charged \u2014 Delannoy-Jodoin with home invasion, risk of injury to a child, second-degree assault with a weapon, robbery, larceny, criminal mischief and threatening/reckless-endangerment counts, and Viruet with home invasion, first-degree robbery and breach of peace. They were held on $250,000 and $100,000 bonds and due at Danielson Superior Court.",
)
B["270"] = s(
"**Victims:** An unidentified Odessa resident who had come to buy cryptocurrency.",
"**Attackers:** A main suspect, taken into custody, together with accomplices who were still being sought.",
"**Attack Method:** In January 2018 the criminals rented a short-term apartment on General Petrova Street in Odessa and arranged a meeting with the prospective buyer, who came unaware of the danger.",
"**Violence Used:** The assailant and his accomplices beat the man.",
"**Crypto Demanded/Stolen:** No cryptocurrency changed hands; they stole his mobile phone, jewellery and money, causing losses of nearly 1,500,000 UAH (about $57,000).",
"**Status:** The main suspect was remanded without bail and the Odessa prosecutor's office sent an indictment to court under Article 187(4) (an especially serious robbery charge, 3\u201315 years with confiscation); police were still working to identify the other accomplices.",
)
existing.update(B)
json.dump(existing, open(PATH, "w", encoding="utf-8"), ensure_ascii=False, indent=2)
print("wrote", len(B), "summaries; file now has", len(existing), "entries")
for k in sorted(B, key=int):
print(f" {k}: {len(B[k])} chars")
merge-output/build_overrides_batch5.py
+105
View File
@@ -0,0 +1,105 @@
import json, io, sys
sys.stdout = io.TextIOWrapper(sys.stdout.buffer, encoding="utf-8", errors="replace")
PATH = __file__[:__file__.rfind("build_overrides")] + "summary-overrides.json"
existing = json.load(open(PATH, encoding="utf-8"))
def s(*cats):
return "\n\n".join(cats)
B = {}
B["266"] = s(
"**Victims:** Four young cryptocurrency holders (aged 18\u201324) in the Busca neighbourhood of Toulouse, France.",
"**Attackers:** Two men, aged 19 and 34, whom the victims had met through an online sales site; both were arrested.",
"**Attack Method:** In late October 2017 the four gathered with the two men in one of their apartments; the visitors opened a suitcase, pulled out a weapon and ordered the group to transfer $20,000 in Bitcoin.",
"**Violence Used:** The four were held at gunpoint and locked inside the apartment.",
"**Crypto Demanded/Stolen:** The Bitcoin transfer failed; instead the two robbed the victims of their smartphones, identity papers, money and keys before locking them in.",
"**Status:** The captives climbed over a balcony to alert police. Investigators traced the pair \u2014 one arrested in Blagnac, the other in Saint-Girons (Ari\u00e8ge) \u2014 and charged them with kidnapping, armed robbery and attempted extortion, with pre-trial detention.",
)
B["263"] = s(
"**Victims:** Waleed, a trader in the Kahna area near Lahore, Pakistan, targeted for his alleged involvement in Bitcoin trading (police referred to him only as a \"businessman\").",
"**Attackers:** A Crime Control Department (CCD) inspector, Javed Iqbal (posted at CCD Kotwali), Constable Tauseef, and two unidentified accomplices \u2014 a case officials called a major embarrassment for the provincial police.",
"**Attack Method:** The suspects, in plain clothes, raided his home and seized his laptop, three mobile phones and the CCTV DVR (apparently to destroy evidence) before abducting him, using a rented vehicle.",
"**Violence Used:** He was held captive and, on the second forced call to his family, threatened with death if the ransom was not paid.",
"**Crypto Demanded/Stolen:** The kidnappers first demanded Rs50 million, then reduced it to Rs4 million after negotiation; the family paid, handing the ransom over near the Lahore Orange Line Station.",
"**Status:** Waleed was released soon after. His family complained to Kahna Police, who arrested Inspector Javed Iqbal and Constable Tauseef and handed them to CCD Model Town for interrogation; officials framed it as a sting to root out corrupt officers.",
)
B["256"] = s(
"**Victims:** A 42-year-old cryptocurrency professional at his property in Rambouillet, Yvelines, France.",
"**Attackers:** Four suspects \u2014 three men and a woman \u2014 all arrested.",
"**Attack Method:** Around 9:00 a.m. on Friday 26 September 2025 the victim saw the four scaling his fence and alerted police; a patrol surprised a man and a woman still inside the property, arrested a third suspect in a Renault Clio on the street and stopped the fourth nearby as he fled on foot.",
"**Violence Used:** The intruders were armed \u2014 one with a switchblade, another with a fake firearm \u2014 but the attempt was foiled and no one was harmed.",
"**Crypto Demanded/Stolen:** None; the attack was stopped before any theft and no financial harm was reported.",
"**Status:** They had planned to target the victim for his crypto involvement. All four were placed in custody and the Versailles Brigade for the Repression of Banditry is investigating, with their phones under analysis.",
)
B["253"] = s(
"**Victims:** An injured youth in Cambridge, Ontario, Canada (near Saginaw Parkway and Townline Road).",
"**Attackers:** Five unknown suspects, described as Black men in their twenties wearing dark clothing and face coverings; no arrests are recorded.",
"**Attack Method:** Around 9:48 p.m. on 5 September 2025 the victim was forced into a dark-coloured van by the five and driven off.",
"**Violence Used:** Inside the van he was physically assaulted and threatened with a firearm; he was later taken to hospital with serious but non-life-threatening injuries.",
"**Crypto Demanded/Stolen:** He was forced to transfer money into a cryptocurrency wallet; the amount was not disclosed.",
"**Status:** The suspects released him and fled along Townline Road. Waterloo Regional Police's General Investigations Unit has an active investigation and has appealed for witnesses and dashcam or surveillance footage.",
)
B["252"] = s(
"**Victims:** A young Swiss national (recorded as 23) kidnapped in Valence, Dr\u00f4me, France.",
"**Attackers:** Seven suspects \u2014 a primary suspect and two others, with four more arrested as investigators located the victim \u2014 facing charges of kidnapping and arbitrary detention for ransom, extortion by an organised gang with a weapon, and criminal conspiracy.",
"**Attack Method:** He was seized in Valence and held for several days, and was found tied up in a house near the Valence-TGV station.",
"**Violence Used:** He was held captive and found bound; the linked report does not describe the treatment further.",
"**Crypto Demanded/Stolen:** The kidnappers demanded a ransom in cryptocurrency; there is no indication it was paid.",
"**Status:** Acting on a 30 August tip-off, the GIGN elite unit \u2014 with the Grenoble research section and close to 150 gendarmerie judicial-police personnel \u2014 raided on 31 August, freed him and arrested seven suspects, with the case under the Lyon JIRS.",
)
B["249"] = s(
"**Victims:** A Chinese businessman who runs a store on R.A. De Mel Mawatha in Colpetty, Colombo, Sri Lanka.",
"**Attackers:** A group of Chinese nationals resident in Sri Lanka, who allegedly targeted a fellow countryman.",
"**Attack Method:** He was abducted around 9:00 p.m. on Friday 22 August 2025, taken away in a vehicle and held captive in a building for about a day.",
"**Violence Used:** He sustained injuries during the abduction and was later treated at a private hospital in Narahenpita.",
"**Crypto Demanded/Stolen:** During his confinement the suspects transferred about US$60,000 (recorded as USDT) out of his holdings online.",
"**Status:** The suspects abandoned him at a roadside on the Saturday afternoon; he filed a complaint with Colpetty Police and investigations are under way.",
)
B["248"] = s(
"**Victims:** A Norwegian family in Oslo \u2014 a mother and her three children.",
"**Attackers:** Robbers who posed as food-delivery workers; nine people were later charged, with one man apprehended. They reportedly acted on a handler's tip that the family held cryptocurrency, raising suspicion of a third-party data leak.",
"**Attack Method:** Disguised as a food delivery, the robbers forced their way into the family's home, tied the family up, and searched the house for a Ledger hardware wallet.",
"**Violence Used:** They tied up the family and beat the mother, threatening to shoot her unless the family handed over their cryptocurrency.",
"**Crypto Demanded/Stolen:** They demanded the family's cryptocurrency; the record indicates no theft was completed.",
"**Status:** Nine people were later charged, with one man apprehended. (Note: the source currently linked to this record is the wrong article \u2014 it describes a separate Suresnes, France assault \u2014 so these details come from the database record and still need a correct Oslo source.)",
)
B["247"] = s(
"**Victims:** An unidentified man who works in cryptocurrency, a guest at the Peninsula Hotel on Kl\u00e9ber Avenue in the 16th arrondissement of Paris.",
"**Attackers:** Five men, all arrested; investigators linked them to a nearby nightclub where the victim allegedly owed \u20ac40,000, leaving it unclear whether this was a crypto kidnapping or forced debt collection.",
"**Attack Method:** On the evening of Tuesday 5 August 2025, around 7:15 p.m., five men approached the hotel guest \u2014 telling him \"you give us 400,000 euros and that's it\" \u2014 and forcibly took him to the area of the Arc de Triomphe.",
"**Violence Used:** He was beaten and threatened, and said the same suspects had displayed a weapon during an incident the week before.",
"**Crypto Demanded/Stolen:** They seized a hard drive holding \u20ac2 million in bitcoin, along with his iPhone 13 Pro Max.",
"**Status:** Anti-crime police quickly located and arrested the five, who were taken into custody at the first judicial police district on extortion charges.",
)
B["246"] = s(
"**Victims:** A 30-year-old Chinese national in Para\u00f1aque City, Philippines; a woman who had come to the same resort to exchange money was also held and identified as a second victim.",
"**Attackers:** Four Chinese nationals, arrested, who had initially offered to help the victim send money to China.",
"**Attack Method:** The victim had asked them to help remit PHP 150,000 for his mother's medical treatment and had already handed over PHP 100,000; he agreed to meet at a resort-casino to complete it, but while in transit was handcuffed, blindfolded and threatened with a firearm.",
"**Violence Used:** He was handcuffed, blindfolded and threatened with a firearm.",
"**Crypto Demanded/Stolen:** The suspects demanded US$50,000 (about PHP 2.8 million) for his release; he was rescued before any payment.",
"**Status:** He talked the suspects into returning his phone, contacted another Chinese national who called 911, and was rescued from the resort on 2 August by Para\u00f1aque City police and the PNP Anti-Kidnapping Group; four suspects were arrested and a second victim, a woman whose cash had been taken, was found with them.",
)
B["245"] = s(
"**Victims:** Prince Pandey, a cryptocurrency trader in Ahmedabad, India, and the son of a retired Army Subedar Major.",
"**Attackers:** Three men, all arrested \u2014 Karan Tarunbhai Nair (19), the acquaintance who set up the meeting, Harsh Ajaybhai Thakkar (21) and Kripalsinh Govindsingh Vihol (25), both car-rental operators; a weapon was recovered from them.",
"**Attack Method:** Pandey had discussed a USDT cash exchange with Nair and was called to meet a supposed customer near Bapunagar Toll Plaza around 2 a.m. on 15 July 2025; on arrival he was forced into a black car with tinted glass and no number plate and moved between locations through the night.",
"**Violence Used:** He was brutally beaten and, because his crypto wallet had no strong password, repeatedly assaulted to force out his access credentials, suffering significant injuries that required hospital treatment.",
"**Crypto Demanded/Stolen:** The kidnappers demanded he transfer 50,000 USDT (about \u20b942 lakh); the record indicates no transfer was completed.",
"**Status:** His father alerted police after failing to reach him; the Ahmedabad City Crime Branch traced the route via CCTV and surveillance and rescued him by afternoon, arresting the three accused. Police attributed the motive to a pending crypto-related financial dispute.",
)
existing.update(B)
json.dump(existing, open(PATH, "w", encoding="utf-8"), ensure_ascii=False, indent=2)
print("wrote", len(B), "summaries; file now has", len(existing), "entries")
for k in sorted(B, key=int):
print(f" {k}: {len(B[k])} chars")
merge-output/build_overrides_batch6.py
+105
View File
@@ -0,0 +1,105 @@
import json, io, sys
sys.stdout = io.TextIOWrapper(sys.stdout.buffer, encoding="utf-8", errors="replace")
PATH = __file__[:__file__.rfind("build_overrides")] + "summary-overrides.json"
existing = json.load(open(PATH, encoding="utf-8"))
def s(*cats):
return "\n\n".join(cats)
B = {}
B["244"] = s(
"**Victims:** Dilip Gaur (recorded as Gaud), of Ramdev Nagar, and his friend Ramesh Sharma, of Subhash Chowk, in Jodhpur, Rajasthan, India.",
"**Attackers:** Four police constables from the Mata Ka Than Police Station \u2014 Narsingh Ram, Rakesh Poonia, Laduram and Jagmal Ram \u2014 all suspended and arrested; a further officer posted elsewhere is also a suspect, not yet arrested.",
"**Attack Method:** On 14 July 2025 around 4 p.m., as the pair parked at a mall near Manji Ka Hatha, constable Jagmal (in uniform) and three or four others in plain clothes intimidated them, forced Dilip from the driver's seat, took over the car, and drove them to the Mata Ka Than Police Station.",
"**Violence Used:** They intimidated the pair, forced them to sign documents, and threatened to implicate them in false criminal charges.",
"**Crypto Demanded/Stolen:** They extorted about \u20b950,000 from each of the two (\u20b91 lakh in cash), then used Dilip's wife's ATM card to have Ramesh withdraw a further \u20b91 lakh \u2014 \u20b92 lakh in cash in all \u2014 and used Dilip's phone to transfer cryptocurrency (USDT, about \u20b98.6 lakh) to an associate.",
"**Status:** The two were released around 8:30 p.m. Dilip complained to police; a case was registered at Mahamandir Police Station under the Bharatiya Nyaya Sanhita, the four constables were arrested, and a fifth officer remains a suspect.",
)
B["243"] = s(
"**Victims:** A 38-year-old man in Queens, New York.",
"**Attackers:** Six men; no arrests are recorded and their motive was unclear.",
"**Attack Method:** On 8 July 2025, after dinner with a friend on Long Island, he was dropped at his car in Flushing (31st Rd. and Union St.); once the friend left, six men set upon him, tased him in the chest and drove him to an unknown location.",
"**Violence Used:** He was tased in the chest and handcuffed while the suspects tried to extract money from him.",
"**Crypto Demanded/Stolen:** He handed over about 900,000 yen (more than $6,000), taken both by wire from a bank account and from a cryptocurrency account.",
"**Status:** He was held for about ten days, then dropped back at his car; he drove to NewYork-Presbyterian Queens, called 911 just before 5 a.m., and told the NYPD what happened, but decided he did not need medical treatment.",
)
B["242"] = s(
"**Victims:** A woman in Suresnes (Hauts-de-Seine), near Paris; the arrested suspect said he had targeted her via social media over the couple's cryptocurrency holdings. Her husband and children witnessed the attack.",
"**Attackers:** Two men. One was arrested nearby carrying two knives and a cleaver; the second remained wanted.",
"**Attack Method:** On the afternoon of Monday 7 July 2025 the two entered her home; one repeatedly punched her in the face (about ten blows) while the other tried to reach the flat's private spaces, seeking the credentials to her crypto wallet. The arrested man said he had identified her through social media.",
"**Violence Used:** She was punched in the face roughly ten times in front of her family and taken to hospital.",
"**Crypto Demanded/Stolen:** The attackers sought to force her to hand over her crypto-wallet credentials; the husband's intervention and police arrival stopped them, and nothing was taken.",
"**Status:** One assailant was arrested nearby with two knives and a cleaver; the second is still wanted. The Hauts-de-Seine judicial police opened an investigation for attempted robbery with violence and are examining whether the pair belong to a larger group targeting crypto holders.",
)
B["240"] = s(
"**Victims:** Sriharsha V., a 33-year-old businessman from Kengeri New Town, Bengaluru, India, who came to the meeting with two friends.",
"**Attackers:** A gang of six to seven men, plus the middleman \"Benjamin Harsha\" who set up the meeting; police detained Benjamin and one other and were questioning them.",
"**Attack Method:** Sriharsha had raised \u20b92 crore to buy machinery from Germany and meant to convert the cash to USDT; a friend introduced him to Benjamin, who told him to bring the cash to MS Palya Circle in Vidyaranyapura on 25 June. As Benjamin's group counted the money in a shop, six to seven men barged in around 4:30 p.m. and demanded it.",
"**Violence Used:** When the victims resisted, two of the men pulled out knives and threatened to kill them.",
"**Crypto Demanded/Stolen:** No cryptocurrency changed hands; the gang seized the group's mobile phones and stuffed the \u20b92 crore in cash into a gunny bag.",
"**Status:** The gang warned the victims off reporting it and locked them in the shop before fleeing; they escaped through the shutters. Police registered a case, detained Benjamin and another man, and Sriharsha said he could identify the attackers.",
)
B["238"] = s(
"**Victims:** A 23-year-old man in Maisons-Alfort, France, and his partner, who was used to deliver the ransom.",
"**Attackers:** A well-informed team plus an accomplice who collected the ransom; the number was not specified and no arrests were reported in this case.",
"**Attack Method:** In a carefully planned operation on 17 June 2025, the couple went shopping by car; while the man waited to park, his partner was drawn away by a fake message about a work emergency and went home alone. A video call then instructed her to leave a Ledger crypto wallet and \u20ac5,000 in cash in a bag outside the building.",
"**Violence Used:** Investigators say the man was subjected to violence to make him reveal the wallet and ransom details.",
"**Crypto Demanded/Stolen:** The abductors demanded a Ledger hardware wallet plus \u20ac5,000 in cash; the partner left the bag and an accomplice collected it, though it is not known whether the wallet held any funds.",
"**Status:** Around 5 p.m. the man, released in Cr\u00e9teil, reached his partner unharmed. The Val-de-Marne judicial police opened an inquiry for kidnapping and organised detention, calling it a sensitive case amid a run of similar crypto-wallet abductions.",
)
B["237"] = s(
"**Victims:** A 26-year-old cryptocurrency trader who makes TikTok content (about 40,000 followers), in Juvisy-sur-Orge, northern France.",
"**Attackers:** Four men; no arrests were reported.",
"**Attack Method:** On the night of Friday 13 June 2025 the four seized him as he returned home and forced him into a stolen vehicle, demanding he hand over \u20ac50,000 (about $57,000) in cryptocurrency.",
"**Violence Used:** He was beaten during the incident and was later granted six days of work-incapacity benefit.",
"**Crypto Demanded/Stolen:** They demanded \u20ac50,000 in crypto, but he showed them the low balance in his account and nothing was taken.",
"**Status:** He was released the next day once the kidnappers realised he could not pay. France's Organised and Specialised Crime Division is investigating.",
)
B["236"] = s(
"**Victims:** A young Russian couple who run a cryptocurrency business \u2014 a 30-year-old woman and her 27-year-old partner \u2014 in the Palermo neighbourhood of Buenos Aires, Argentina.",
"**Attackers:** Two Chechen men who had rented a first-floor apartment (on Ravignani, near Gorriti) for the previous two nights; both were named as the main suspects and placed under an Interpol red notice.",
"**Attack Method:** The couple were invited to dinner at the apartment on the Friday night, then taken hostage and tied up while a ransom was demanded.",
"**Violence Used:** The couple were tied up; the woman called for help in English from the balcony.",
"**Crypto Demanded/Stolen:** A ransom of $43,000 in digital currency was paid by a compatriot friend, transferred after a conversation with the captors.",
"**Status:** Around 11 p.m. the woman's cries from the balcony were heard by staff at the neighbouring restaurant, who called 911; City Police found the couple bound. The two suspects fled Argentina by plane from Ezeiza to the UAE within hours and are under Interpol red notice; the case is with the Federal Police's Southern Anti-Kidnapping Department under judge Mar\u00eda Romilda Servini.",
)
B["235"] = s(
"**Victims:** A cryptocurrency entrepreneur near Nantes (Loire-Atlantique), France, targeted for the fortune he had made in crypto.",
"**Attackers:** A ten-man commando \u2014 hooded, gloved and dressed in black \u2014 waiting in two vehicles; all were arrested. The suspected mastermind, 24-year-old Badiss Mohamed Amide Bajjou (subject of an Interpol red notice), was later arrested in Tangier, Morocco.",
"**Attack Method:** On a Monday morning in late May 2025 near Nantes, the Banditry Repression Brigade (BRB) of the Paris judicial police had the two parked vehicles under surveillance and identified the men as a commando preparing to kidnap the entrepreneur.",
"**Violence Used:** None \u2014 the plot was foiled before any attack; no one was harmed.",
"**Crypto Demanded/Stolen:** None; the kidnapping was prevented before it began.",
"**Status:** Police arrested the ten men at the scene. The suspected ringleader was later arrested in Morocco; French authorities charged 25 people, including six minors, over the wider series of crypto kidnappings and attempts.",
)
B["234"] = s(
"**Victims:** A group of Korean investors \u2014 ten men were invited and two were led into the room \u2014 in Seoul, South Korea; one was found bleeding after the ambush.",
"**Attackers:** Three Russian nationals. One man in his 20s was arrested in Busan on 27 May and charged with assault and attempted robbery; the other two fled the country.",
"**Attack Method:** On 21 May 2025 the suspects posed as parties to a peer-to-peer crypto transaction and invited ten Korean men to a hotel in Seoul's Gangseo District; two were called up to the room while the rest waited in the lobby, and the suspects \u2014 wearing protective vests \u2014 ambushed them with a replica handgun and a telescopic baton and bound their hands with cable ties.",
"**Violence Used:** The victims were ambushed with a replica handgun and a baton and tied with cable ties; one was found bleeding in the lobby.",
"**Crypto Demanded/Stolen:** The suspects tried to take 1 billion won (about $730,000) in cash meant for the crypto deal, but the robbery failed and nothing was taken.",
"**Status:** One victim escaped and raised the alarm, and the suspects fled empty-handed. Police seized a replica firearm, batons, vests and a money counter, arrested one suspect in Busan, and sought Interpol's help to trace the two who had fled overseas.",
)
B["233"] = s(
"**Victims:** A 46-year-old mother and her 22-year-old son \u2014 a cryptocurrency trader who is autistic \u2014 in Normandy, France.",
"**Attackers:** A team of criminals; five suspects, aged 18 to 24, were arrested, indicted and imprisoned.",
"**Attack Method:** On 18 May 2025 the mother and son told police their home was being watched by a team planning to abduct them; investigators found a GPS tracker under the family car and signs the house had been scouted. On 11 June, as vehicles closed in on the home, the BRI of Rouen and OFAST Le Havre intercepted them, recovering a knife and a roll of tape.",
"**Violence Used:** None \u2014 the plot was foiled before any attack; the plan had been to cut a knuckle from the mother's finger to force her son to empty his wallet.",
"**Crypto Demanded/Stolen:** None; the scheme to force the son to drain his crypto wallet was prevented.",
"**Status:** Five suspects were arrested at the interception and were indicted and incarcerated; the case was handled by the Lille JIRS with Le Havre investigators and the central anti-organised-crime office.",
)
existing.update(B)
json.dump(existing, open(PATH, "w", encoding="utf-8"), ensure_ascii=False, indent=2)
print("wrote", len(B), "summaries; file now has", len(existing), "entries")
for k in sorted(B, key=int):
print(f" {k}: {len(B[k])} chars")
merge-output/build_overrides_batch7.py
+105
View File
@@ -0,0 +1,105 @@
import json, io, sys
sys.stdout = io.TextIOWrapper(sys.stdout.buffer, encoding="utf-8", errors="replace")
PATH = __file__[:__file__.rfind("build_overrides")] + "summary-overrides.json"
existing = json.load(open(PATH, encoding="utf-8"))
def s(*cats):
return "\n\n".join(cats)
B = {}
B["232"] = s(
"**Victims:** Festo Ivaibi, founder of the cryptocurrency education hub Mitroplus Labs, abducted near his home on Bunamwaya Road in Kampala, Uganda.",
"**Attackers:** Armed men in military uniforms who claimed to be UPDF \"security operatives\"; according to a statement from Mitroplus's Afro Token Project, the plot allegedly involved informants posing as crypto traders, rogue officers and two Chinese nationals.",
"**Attack Method:** On 17 May 2025 the armed, uniformed group seized Ivaibi near his residence.",
"**Violence Used:** He was held at gunpoint and forced to unlock his cryptocurrency wallets.",
"**Crypto Demanded/Stolen:** He was made to transfer about $500,000 in cryptocurrency to a wallet the attackers controlled, and a portion of Afro Token (a meme coin) was sold under coercion.",
"**Status:** Mitroplus Labs claims at least 48 similar attacks have taken place in Uganda, most of them unreported; Decrypt said it had approached Mitroplus and the UPDF for comment.",
)
B["231"] = s(
"**Victims:** A cryptocurrency mining company operating in Coronel Bogado, Paraguay.",
"**Attackers:** Chinese nationals; during a raid on a farm in San Pedro del Paran\u00e1 investigators found four Chinese men \u2014 described as programmers who had worked at the company for months \u2014 in a closed room, three of whom had entered Paraguay illegally through Bolivia and Brazil.",
"**Attack Method:** An attempted assault on the mining company on 14 May 2025 set off a chase and a shootout with the National Police, and the ensuing investigation located the men on the nearby farm.",
"**Violence Used:** The incident involved a shootout with police; according to the record no one was hurt.",
"**Crypto Demanded/Stolen:** Nothing was taken \u2014 police drove the assailants off before anything was stolen.",
"**Status:** The prosecutor, Irene Rol\u00f3n, said the foreigners were not victims of trafficking; the three who lacked legal entry were expelled from Paraguay, and the company owner was asked to produce the documentation for hiring them.",
)
B["230"] = s(
"**Victims:** The 34-year-old daughter of the CEO of the cryptocurrency platform Paymium, attacked together with her 2-year-old child in the 11th arrondissement of Paris.",
"**Attackers:** Three hooded men, one of whom apparently dropped a handgun (unknown whether real or fake); the record notes the ringleader was later arrested.",
"**Attack Method:** On the morning of 13 May 2025, around 8:20 a.m. at rue Pache, the three tried to force the mother into a Chronopost-branded van.",
"**Violence Used:** The child's father intervened and was struck by the attackers as the victim cried out and many passers-by looked on.",
"**Crypto Demanded/Stolen:** None \u2014 the kidnapping attempt was foiled.",
"**Status:** The father's intervention drove the men off; they fled back into the van's trunk, and the vehicle was found nearby soon after. The Paris prosecutor tasked the banditry repression brigade with the investigation.",
)
B["229"] = s(
"**Victims:** Jacob Irwin-Cline, 30, an American tourist and former software developer from Portland, Oregon, on a short London layover; he says he built his wealth investing in Bitcoin as a teenager.",
"**Attackers:** A fake Uber driver calling himself \"Mohammed\", whom Jacob believes was part of an organised ring in which a second conspirator controlled the genuine Uber account. No arrests were made.",
"**Attack Method:** In the early hours of 9 May 2025, after a night out at a Soho bar, Jacob got into a dark sedan \u2014 not the Prius shown in his app \u2014 whose driver flagged him by his app alias, then offered him a cigarette Jacob believes was spiked with a drug (possibly scopolamine), leaving him docile while the driver took his phone passcode and app passkeys.",
"**Violence Used:** He believes he was drugged and became docile; as he was made to get out in a residential area near Golders Green the car drove off and struck his leg, leaving him unable to walk for days (no toxicology test was ever done).",
"**Crypto Demanded/Stolen:** About $123,000 was drained from his accounts \u2014 his XRP wallet fell from roughly $73,000 to under $1,000 and his Bitcoin wallet from about $50,000 to under $10, plus smaller coins \u2014 and his laptop was remotely wiped; he believes he traced the funds toward wallets on the MEXC and BTSE exchanges.",
"**Status:** A stranger arranged a taxi back to his hostel, and he reported the theft to the Metropolitan Police, Action Fraud and the FBI's cybercrime unit. Police confirmed a report with no arrests and enquiries ongoing, and Jacob is pessimistic about recovering the funds.",
)
B["228"] = s(
"**Victims:** A 28-year-old Italian man (the linked report withholds his name) who arrived in New York from Italy on 6 May 2025.",
"**Attackers:** John Woeltz, 37, a crypto entrepreneur dubbed the \"crypto king of Kentucky\", and William Duplessie, 33; a 24-year-old woman was also arrested but is not being prosecuted at this time.",
"**Attack Method:** Prosecutors say the two lured the man from Italy by threatening to have his family killed; at Woeltz's eight-bedroom SoHo townhouse he was stripped of his electronics and passport, bound, and held for about 17 days.",
"**Violence Used:** He was beaten, given electric shocks, forced to smoke crack cocaine, pistol-whipped, cut with a small chainsaw, doused in tequila and set alight before the fire was put out, and hung over a stairwell ledge \u2014 all to force him to reveal his Bitcoin password.",
"**Crypto Demanded/Stolen:** The torture was aimed at extracting his Bitcoin password; he did not give it up and nothing was taken.",
"**Status:** On 23 May he escaped \u2014 saying he would fetch the password from his laptop, then fleeing downstairs to a traffic officer \u2014 and was hospitalised in stable condition. Police recovered a saw, crack cocaine, a firearm and Polaroids of the victim with a gun to his head. Woeltz was arrested on 23 May and Duplessie surrendered on 27 May; both were indicted on about a dozen counts, denied bail, and pleaded not guilty, and the defence disputes the account.",
)
B["224"] = s(
"**Victims:** Mohammed Ismail, seized in PIB Colony, Karachi, Pakistan.",
"**Attackers:** A gang of six to seven men who posed as officials of the FIA, the Counter-Terrorism Department and intelligence agencies; four were arrested \u2014 Imtiaz alias Salman, Ubaid Rehman alias Abi, Shahid alias Moosa and Saleem.",
"**Attack Method:** On 13 April 2025 the gang \u2014 using a black Vigo (a four-wheel drive) with a fake government plate, masks, arms, walkie-talkies and handcuffs \u2014 abducted Ismail and took him to a warehouse in Steel Town.",
"**Violence Used:** He was held by an armed group that accused him of illegal Hundi/Hawala dealing and threatened him.",
"**Crypto Demanded/Stolen:** They questioned him about his Bitcoin business, took his iPhone, and said they would contact him about money later.",
"**Status:** They released him on Shahra-e-Faisal. Acting on an intelligence tip, the Counter-Terrorism Department arrested four suspects near Parking Plaza in Saddar and recovered snatched phones, three pistols, walkie-talkies, handcuffs and the fake-plated Vigo.",
)
B["222"] = s(
"**Victims:** A 27-year-old Turkish man who had just arrived in Hong Kong for cryptocurrency trading, in Tsim Sha Tsui.",
"**Attackers:** Two assailants (one carrying a knife) plus two accomplices who helped dispose of the weapon; four South Asian men, aged 17 to 31, were arrested.",
"**Attack Method:** On 27 March 2025 at about 4:45 p.m. outside 68 Nathan Road, as he carried a bag holding \u20ac5 million in cash, two men attacked him from behind, one brandishing a knife.",
"**Violence Used:** He was slashed, suffering a 10-centimetre knife wound to the forehead (with no damage to his eyes or vital organs), and fell to the ground.",
"**Crypto Demanded/Stolen:** Nothing was taken \u2014 he fought back and kept the bag of \u20ac5 million.",
"**Status:** The attackers fled toward Jordan Road; the injured man reported the attack himself and was hospitalised. Police reviewed CCTV, arrested four South Asian men in Jordan and Mong Kok, recovered clothing and four phones, and were still searching for the discarded knife.",
)
B["221"] = s(
"**Victims:** Rodrigo Perez, a Spanish businessman linked to financial crimes in Paraguay and Ecuador who was himself wanted by Interpol, seized in S\u00e3o Paulo, Brazil.",
"**Attackers:** Men in fake police uniforms; Ronaldo Batista, a retired military policeman, was arrested and confessed, while the second kidnapper remained at large. Authorities did not rule out gang involvement.",
"**Attack Method:** In late March 2025 the fake officers used an official-looking truck to take Perez to a makeshift prison, where he was held for five days tied to a bed.",
"**Violence Used:** He was kept drugged with sleeping pills, restrained and harassed throughout.",
"**Crypto Demanded/Stolen:** By his account the kidnappers took close to $50 million in cryptocurrency from him.",
"**Status:** Perez escaped by winning his captors' trust and drugging the guard with the same sleeping pills; when he reported the kidnapping, authorities found he was himself Interpol-wanted. They continue to treat him as a victim while aware of his alleged crimes, and Batista was arrested when the site was raided.",
)
B["219"] = s(
"**Victims:** A 41-year-old man surnamed Wong, in the Cheung Sha Wan area of Hong Kong.",
"**Attackers:** An unidentified man, still at large (about 1.75 m tall, in a black long-sleeved top).",
"**Attack Method:** Late on 13 March 2025, around 11:39 p.m. on Lai Wan Road near the Lai Chi Kok Government Offices, a man approached Wong from behind and snatched the plastic bag of cash he was carrying, then fled toward King Lai Path. Earlier that evening Wong had met a buyer on Sung Wong Toi Road to complete a cryptocurrency sale and was on his way home.",
"**Violence Used:** None reported \u2014 the bag was snatched from behind. (The database description's \"beaten with a stick\" is not supported by the linked article.)",
"**Crypto Demanded/Stolen:** He had just sold about HK$318,000 of cryptocurrency and was robbed of the HK$318,000 in cash he had received for it.",
"**Status:** The suspect fled and remains at large; police searched the area without success, classified the case as robbery, and continued the investigation.",
)
B["218"] = s(
"**Victims:** Kaitlyn Siragusa, the streamer known as \"Amouranth\", at her home in Houston, Texas; she had posted a screenshot of a roughly $20 million Bitcoin wallet.",
"**Attackers:** An armed gang; a group of teenagers aged 16 to 19 were later arrested and charged, three of them with aggravated kidnapping and aggravated robbery with a deadly weapon.",
"**Attack Method:** On 2 March 2025 the gang carried out a home invasion, pulling her from her bed, holding a gun to her head, demanding cryptocurrency and telling her to log in to her phone.",
"**Violence Used:** She was held at gunpoint and suffered a scalp laceration that needed stitches; she said she shot one of the intruders during the confrontation.",
"**Crypto Demanded/Stolen:** The attackers demanded crypto but did not obtain it; the one item they took was her MacBook, which she later tracked using Find My.",
"**Status:** She was hospitalised and said she was safe. About two weeks later authorities arrested and charged a group of teenagers aged 16 to 19, two of whom remained in custody on $150,000 and $200,000 bonds.",
)
existing.update(B)
json.dump(existing, open(PATH, "w", encoding="utf-8"), ensure_ascii=False, indent=2)
print("wrote", len(B), "summaries; file now has", len(existing), "entries")
for k in sorted(B, key=int):
print(f" {k}: {len(B[k])} chars")
merge-output/case-files-manifest.json
+3827
View File
File diff suppressed because it is too large Load Diff
merge-output/cases-missing-from-database.json
+15
View File
@@ -0,0 +1,15 @@
[
{
"sheet_row": 252,
"victim": "Alexander",
"date": "August 27, 2025",
"location": "Phuket, Thailand",
"country": "Thailand",
"scenario": "Malicious Invitation - SocialEng",
"description": "A Russian national went to a house for a business investment consultation. When he arrived a group of 4 Russians assaulted him and forced him to transfer 35,000 USDT. The attackers fled the country but 1 was caught aboard a ferry.",
"recorded_url": "https://cryptonews.com/news/french-crypto-trader-kidnapped-near-paris-released-after-refusing-10k-ransom-report/",
"url_warning": "This URL is WRONG. It points to a French case near Paris (DB id 350, Alexandre). The saved article is a Phuket robbery. The correct source needs to be re-found.",
"why_missing": "No record in the 364-row export matches this event. Nearest Thailand case is id 204 (January 5 2025, Phuket), a different incident.",
"article_text": "Russian Fugitive Caught Hiding in Car at Koh Samui Ferry Port\nBy Georgealbert\nAugust 28 in Koh Samui News\nLocation:Sattahip\nPosted August 28\nPictures courtesy of Khaosod\n\nA Russian man wanted for a cryptocurrency robbery in Phuket has been arrested while attempting to flee through Koh Samui, police confirmed on 28 August.\n  The suspect, identified as Dmitri, 26, was apprehended at the Lipa Noi ferry terminal, after officers discovered him hiding in the back seat of a car with Prachinburi plates.\nPolice from Koh Samui and Surat Thani worked alongside investigators from Phuket’s Chalong Police Station and the Technology Crime Investigation Division to carry out the arrest. The operation was launched after intelligence revealed that Dmitri had boarded the 11:00 ferry from Don Sak to Koh Samui.\nAt around 12.50, officers intercepted the vehicle as it disembarked. Although only a foreign driver, later identified as Gleb, also Russian, was visible, a search revealed Dmitri attempting to conceal himself on the back seat of the car.\nPolice presented a Phuket Provincial Court warrant for robbery, with an interpreter on hand, but Dmitri declined to make any statement. He has since been transferred back to Phuket for questioning.\nInvestigators said Dmitri and three accomplices had lured another Russian national, Mr Alexander, to a house in Phuket on the pretext of discussing a business investment. Instead, Alexander was assaulted and forced to transfer 35,000 USDT (around 1.3 million baht) via the TRONSCAN platform.\nThe rest of the gang fled the country soon after, leaving Dmitri behind. Police believe Dmitri attempted to enlist the help of a Russian associate in Koh Samui to evade capture. His escape bid ended at the ferry terminal when officers tracked the car and discovered him inside.\n"
}
]
merge-output/corrections-approved.md
+75
View File
@@ -0,0 +1,75 @@
# Approved corrections — apply these on the website database
Sofia's decision on each, taken one by one. Nothing here has been applied automatically.
Evidence for every item is in `research-results.json` and `fact-check-findings.json`.
---
## Spreadsheet fixes (not the database)
**Row 259** — `URL` is `https://archive.is/El9EI`, which is the Kharkiv snapshot. That same
link correctly sits on row 262 (Kharkiv) and on DB id 258 (Kharkiv). The article saved in
row 259 is the Europe 1 Val-de-Marne story, and DB id 362 already holds the correct
Europe 1 URL. So the database is right and this row's URL is the mispaste.
→ **Fix or clear the URL on row 259. Leave DB id 258 alone.**
**Row 18** — `Scenario` says `Armed Robbery in Public Space`. The article says the attack
happened inside the victims' own apartment in the Busca neighbourhood of Toulouse. DB id
266 already says `Home Invasion`, which is closer.
→ **Fix the sheet.**
**Row 252** — `URL` points to `cryptonews.com/.../french-crypto-trader-kidnapped-near-paris`,
a different case in France. The article saved in that row is a Phuket robbery in Thailand.
Trusting this URL would have filed the article under DB id 350.
→ **Re-find the correct source.** This case is also absent from the database entirely; see
`cases-missing-from-database.json`.
---
## DB id 307 — Salford, October 2023
`description` duplicates id 354 (incident 1, the door knock) and `notes` describes
incident 2. Date, location, scenario and flags already fit incident 4. Confirmed by
elimination: five sheet rows, five DB records, four pairs settled independently.
→ **Rewrite to incident 4, quoting the source in notes:**
> "Days later, the gang turned up at the victim's house again, demanding more money. They
> took him to Egret Drive, the address he was later found at by police, and placed a bag
> over his head."
---
## DB id 321 — Recife, 21 March 2025
`victim` reads `Crypto manager`, but the person kidnapped was his mother. The record already
contradicts itself: the description reads "Crypto manager surveilled, mother kidnapped,
ransomed for 5 BTC".
→ **Change `victim` to the mother.**
---
## DB id 456 — Serra, Espírito Santo, 11 June 2026
**Drug-trafficking network claim — DELETE.** The summary states the investigation "led to
broader operation against a drug trafficking and money laundering network in Espírito Santo
and Bahia". No source makes this claim. It traces to an unrelated teaser headline sitting
inside the Sim Notícias page, about a street sweeper in a different case.
**Pistol-whipping — DELETE, but keep `violence_torture` = 1.** No source contains
"coronhada". Serra Noticiário, sourced to the police who processed him, says his only
injuries were "escoriações causadas pela queda durante a fuga". The flag stays on the basis
of one early A Tribuna line attributed to unnamed residents: "A vítima teria tentado
resistir ao sequestro, mas foi agredida." Record that as the basis, alongside the police
account of his injuries.
**Vehicle count — CORRECT to two attacker vehicles.** Keep the eight-suspect figure, which
the victim's own account supports. Drop the third vehicle and the invented per-attacker
role breakdown. Lt. Tavares: "conseguimos identificar dois carros que emparelharam com a
Porsche, um HB20 branco e um Celta prata."
Also record: **both attacker vehicles carry São Paulo plates registered to the same owner**
(Serra Noticiário) — relevant to whether an attack was organised or opportunistic.
**"as of June 16, 2026" — REMOVE the date, keep the rest.** No article dated 16 June or
later exists; every source found is dated 11 or 12 June. The count stands as "one arrested,
seven at large", with no date attached.
merge-output/corrections-for-database.json
+98
View File
@@ -0,0 +1,98 @@
[
{
"target": "DB id 321",
"field": "victim",
"current": "Crypto manager",
"issue": "The person kidnapped was the crypto manager's mother, not the manager.",
"action": "Rename the victim to identify the mother.",
"confirmed_by": "Sofia, this session"
},
{
"target": "DB id 307",
"field": "description + notes",
"current": "description duplicates id 354 (incident 1); notes describe incident 2",
"issue": "This record is incident 4 of the Salford series: the gang returned to the victim's house, took him to Egret Drive and put a bag over his head.",
"action": "Rewrite description and notes to incident 4. Its date, location, scenario and flags are already correct.",
"confirmed_by": "elimination across 5 sheet rows and 5 DB records"
},
{
"target": "DB id 258",
"field": "url",
"current": "https://archive.is/El9EI",
"issue": "The same archive link sits on sheet row 259, whose saved article is the Val-de-Marne case (DB id 362, Europe 1). Id 258 is a Kharkiv kidnapping.",
"action": "Verify which case that snapshot belongs to and clear the wrong one.",
"confirmed_by": "URL audit"
},
{
"target": "sheet row 18",
"field": "Scenario",
"current": "Armed Robbery in Public Space",
"issue": "The article says the attack happened inside the victims' own apartment in the Busca neighbourhood of Toulouse.",
"action": "DB id 266 already says Home Invasion, which is closer. Fix the sheet.",
"confirmed_by": "article text, 20 Minutes"
},
{
"target": "DB id 460",
"field": "summary",
"current": "names the victim 'Artem Ivanov' and calls him owner of Hedonist Restaurant",
"issue": "Official sources (ANTARA carrying the Bali Police statement, Bali Times, Social Expat) refer to the victim only by the initials A.I. and say he was RETURNING FROM the restaurant, not that he owned it. Both the full name and the ownership claim trace to a single Indonesian-language Threads.com post.",
"action": "Replace the name with 'Russian national, initials A.I., 41 years old'. Replace 'owner of Hedonist Restaurant' with 'was returning from Hedonist Restaurant'. Note that name and ownership are unconfirmed and sourced only from social media.",
"confirmed_by": "Sofia, against ANTARA News official police statement"
},
{
"target": "DB id 460",
"field": "url_2..url_5",
"current": "five links, none of them ANTARA",
"issue": "ANTARA News carries the official Bali Police statement and confirms details the linked sources do not, including the villa key taken from the motorcycle dashboard and used to enter Villa Ukulele. The record's 'Villa Ukulele' note is correct; it is simply not evidenced by anything currently linked.",
"action": "Add the ANTARA article as a linked source.",
"confirmed_by": "Sofia"
},
{
"target": "DB id 460",
"field": "money_wanted",
"current": "$4.9M to $5M in Crypto",
"issue": "No source gives $4.9M. Only Bali Discovery gives a figure at all, US$5 million or about Rp 90 billion, and it attributes that to an Instagram interview. The same article states: 'Police have yet to share the amount of money lost from Crypto Asset Accounts owned by AI.'",
"action": "Drop the $4.9M lower bound. Record the figure as US$5M reported via an Instagram interview, with no police confirmation.",
"confirmed_by": "Bali Discovery, Bali Times, BeInCrypto, all read directly"
},
{
"target": "DB id 460",
"field": "summary",
"current": "'Four crime scenes processed: Hedonist Restaurant, abduction point in Pecatu, Villa Ukulele, hospital drop-off'",
"issue": "FABRICATED LIST. Sources say police investigated four locations but none of them says which four. The bulk import invented the enumeration.",
"action": "Replace with 'police processed four crime scenes; the locations were not specified in reporting'.",
"confirmed_by": "Bali Discovery names the count only; no source enumerates the sites"
},
{
"target": "DB id 460",
"field": "weapons",
"current": "null",
"issue": "No source describes a weapon; the restraints were plastic handcuffs. But police are pursuing the case under the Indonesian criminal code as kidnapping, physical assault AND armed robbery, which implies one. The flag and the legal classification disagree.",
"action": "Decide whether the flag follows what reporting describes or what the charge implies, and apply that rule consistently across cases.",
"confirmed_by": "Bali Discovery"
},
{
"target": "DB id 462",
"field": "url_2",
"current": "YouTube video titled around an 'empresário' (businessman)",
"issue": "Not a mismatch. Brazilian outlets describe this victim variously as an influencer and as a businessman. Recorded so it is not re-investigated on every future pass.",
"action": "None. Leave as linked.",
"confirmed_by": "Sofia"
},
{
"target": "DB id 462",
"field": "weapons / notes",
"current": "weapons = 1, with no qualifier",
"issue": "The flag is correct, the attackers used the weapons to intimidate. But the weapons carried during the kidnapping were imitation police props; a real firearm appears only later, during the police chase.",
"action": "Keep weapons = 1 and add a note recording that the weapons used in the abduction were imitation.",
"confirmed_by": "Sofia"
},
{
"target": "sheet row 252",
"field": "URL",
"current": "cryptonews.com/news/french-crypto-trader-kidnapped-near-paris-...",
"issue": "Points to a French case near Paris. The article saved in that row is a Phuket robbery in Thailand. Trusting this URL would have filed the article under DB id 350.",
"action": "Re-find the correct source for the Phuket case.",
"confirmed_by": "URL audit + article text"
}
]
merge-output/corrections-register.json
+282
View File
@@ -0,0 +1,282 @@
{
"_about": "Single register of every correction, with status. RESOLVED items are decided and must not be re-asked. Check this before raising anything with Sofia.",
"_status_values": {
"RESOLVED": "Sofia decided. Apply on the website; do not re-open.",
"PENDING": "Needs Sofia's decision.",
"RESEARCH": "Needs evidence before a decision is possible.",
"AMBIGUOUS": "Two answers given in different rounds; needs one confirmation."
},
"spreadsheet": [
{
"id": "sheet-r259",
"field": "URL",
"status": "RESOLVED",
"issue": "Holds archive.is/El9EI, the Kharkiv snapshot, but the article saved in the row is the Europe 1 Val-de-Marne story. The same link correctly sits on row 262 and DB id 258, both Kharkiv. DB id 362 already holds the correct Europe 1 URL.",
"action": "Fix or clear the URL on row 259. Leave DB id 258 alone.",
"note": "Earlier I had this backwards and said id 258 was wrong. It is not."
},
{
"id": "sheet-r18",
"field": "Scenario",
"status": "RESOLVED",
"issue": "'Armed Robbery in Public Space' but the attack happened inside the victims' own apartment in Toulouse.",
"action": "Change to Home Invasion, matching DB id 266."
},
{
"id": "sheet-r252",
"field": "URL",
"status": "RESOLVED",
"issue": "Points to a French case near Paris; the saved article is a Phuket robbery in Thailand.",
"action": "Re-find the correct source. This case is also absent from the database entirely."
}
],
"database": [
{
"id": 307,
"field": "description + notes",
"status": "RESOLVED",
"action": "Rewrite to incident 4 of the Salford series, quoting: 'Days later, the gang turned up at the victim's house again, demanding more money. They took him to Egret Drive, the address he was later found at by police, and placed a bag over his head.'"
},
{
"id": 321,
"field": "victim",
"status": "RESOLVED",
"action": "Change from 'Crypto manager' to the mother, who was the person kidnapped."
},
{
"id": 456,
"field": "summary (drug network)",
"status": "RESOLVED",
"action": "Delete. Traces to an unrelated teaser headline inside the Sim Noticias page."
},
{
"id": 456,
"field": "summary (pistol-whipping)",
"status": "RESOLVED",
"action": "Delete 'pistol-whipped'. Keep violence_torture = 1, basing it on the hedged A Tribuna line and recording the police account of injuries from the escape fall."
},
{
"id": 456,
"field": "summary (vehicles)",
"status": "RESOLVED",
"action": "Two attacker vehicles, not three. Keep eight suspects. Also record that both vehicles carry Sao Paulo plates registered to the same owner."
},
{
"id": 456,
"field": "summary (status date)",
"status": "RESOLVED",
"action": "Remove the 'as of June 16, 2026' claim. Keep 'one arrested, seven at large' with no date."
},
{
"id": 456,
"field": "summary (victim criminal record)",
"status": "RESOLVED",
"action": "Delete 'no criminal record'. The drug conviction belongs to the arrested suspect."
},
{
"id": 456,
"field": "coin_type",
"status": "RESOLVED",
"issue": "Field holds a fiat amount rather than a coin. Serra Noticiario is the only source naming one, USDT, and it also gives a different figure (R$20,000 vs R$15,000).",
"decisions_given": [
"earlier: keep R$15,000 and add USDT to coin_type",
"later: leave as is"
],
"needs": "one confirmation",
"action": "Do NOT add USDT. The field is used to confirm AMOUNTS, not to name a coin, and the coin is not established. State the available amount information only.",
"evidence_note": "USDT is not invented: Serra Noticiario prints '3.700 USDT (Tether), valor equivalente a aproximadamente R$ 20 mil'. But it is the only source naming a coin and also the only one giving R$20,000 instead of R$15,000, so the coin rests on the same source that disagrees on the amount.",
"decided_by": "Sofia"
},
{
"id": 456,
"field": "description (Porsche 718, quote, followers)",
"status": "RESOLVED",
"issue": "Model number, self-description quote and follower count all unsourced.",
"decisions_given": [
"earlier: fix all three outright",
"later: leave for now"
],
"needs": "one confirmation",
"action": "LEAVE AS IS for now. Logged as known-unsourced: the '718' model number, the 'Forex, crypto and proprietary trading desk' quote and the rounded 82,000 follower figure are none of them in any source. Revisit only if Sofia raises it."
},
{
"id": 457,
"field": "notes (plate causality)",
"status": "RESOLVED",
"issue": "Notes assert the recorded plate led to the Gignac arrests. Five sources read, none says so; two describe police catching the group mid-transaction, a third says relatives blocked the escape with roadblocks.",
"needs": "Sofia asked for one more check specifically for a source confirming the plate claim. La Provence's paywalled 75% is the most likely place it would sit.",
"action": "REMOVE the claim that the plate led investigators to the four men. Record only what is supported: the suspects fled leaving the plate number at the scene, and four men were arrested at Gignac-la-Nerthe hours later.",
"url": "https://www.laprovence.com/article/faits-divers-justice/2193885092828214/quatre-hommes-arretes-en-plein-braquage-sur-fond-de-cryptomonnaies-pres-de-marseille",
"note": "Same article serves case 458, whose Gignac detail is also likely in the unretrieved 75%.",
"evidence": "Eight sources read directly, none states the causal link. Cryptopolitan EN: the plate 'may prove to be the thread that connects these suspects to a broader network' — conditional, and about a wider network. Journal du Coin and Cryptoast both describe police catching the group mid-transaction.",
"do_not_record": "cryptoactu.com's roadblock detail. That outlet carries apparently invented material elsewhere in the same piece and is uncorroborated.",
"origin": "The claim traces to the bulk-import AI summary, which the case file already labels NOT verified against sources."
},
{
"id": 458,
"field": "kidnappings",
"status": "RESOLVED",
"action": "No change. The field counts incidents, so 1 is correct. Add a note that two women were held."
},
{
"id": 458,
"field": "sources",
"status": "RESOLVED",
"action": "Keep the La Provence link, noting that its retrievable quarter evidences sibling case 457, not this one."
},
{
"id": 459,
"field": "victim names",
"status": "RESOLVED",
"action": "KEEP the names as recorded. Deliberate exception to the primary-source rule, taken with the evidence in view. Do not re-open in a later session.",
"caveat": "No primary document names either woman; five spellings of the Dutch victim's surname circulate. That caveat belongs with the names."
},
{
"id": 459,
"field": "summary (cousin Sikander)",
"status": "RESOLVED",
"action": "Replace with the four named co-accused (Muhammad Raza Dar, Hassan Raza, Sikandar Khan, Sajid Ali) and the 'boss' figure police named as Waheed of Okara, who has eight prior cases."
},
{
"id": 459,
"field": "summary (Ishaq Dar)",
"status": "RESOLVED",
"action": "Keep the name, attributed precisely: reported by EFE via an unnamed police source, and as the suspect's own claim to the victim. Not as established fact."
},
{
"id": 459,
"field": "summary (SHO suspension)",
"status": "RESOLVED",
"action": "Suspension is real but the reason is wrong. Basis was an FIR alleging forced entry at a judicial magistrate's residence under PPC 452, 506-B and 34, not negligence."
},
{
"id": 459,
"field": "victim nationality",
"status": "RESOLVED",
"action": "Venezuelan national, resident in Hondon de las Nieves, Alicante, Spain. Explains the 2-2 source split."
},
{
"id": 459,
"field": "violence_torture wording",
"status": "RESOLVED",
"action": "Both women allegedly sexually assaulted, charges filed under PPC 375-A, matter before the court. Do not assert which victim the medical report concerns."
},
{
"id": 459,
"field": "scenario (staged kidnapping)",
"status": "RESOLVED",
"issue": "Two sources report police investigating a staged kidnapping. Dawn, from her sworn Section 164 statement, gives a narrower version: the main suspect posed as a fellow victim to mask his complicity in a real abduction. No police or court finding closes it.",
"needs": "whether to record the narrow version, the broad version, or nothing",
"action": "Record as an OPEN POLICE LINE: police were investigating whether the kidnapping was staged, with the main suspect posing as a victim. No source reports the theory confirmed or dropped.",
"evidence": "Daily Pakistan: 'a staged kidnapping scenario was created to mislead authorities, during which the main suspect reportedly portrayed himself as one of the victims.' ProPakistani: 'the man who had invited them to Pakistan pretended to be a victim as well.' Dawn, from her sworn Section 164 statement: 'While the primary suspect initially acted as a fellow victim to mask his complicity, it later became evident he was working in tandem with the armed group.'",
"note": "'Staged' means the suspect faked being a victim. The women were genuinely abducted."
},
{
"id": 460,
"field": "money_wanted",
"status": "RESOLVED",
"issue": "Record says '$4.9M to $5M'. No source gives $4.9M. The $5M figure comes from an Instagram interview, and Bali Discovery states police 'have yet to share the amount of money lost'.",
"recommended": "Drop the $4.9M lower bound; record US$5M as reported via an Instagram interview with no police confirmation.",
"action": "LEAVE AS IS for now. $5M is at least reported, via an Instagram interview, even though police had released no figure. Logged as known-weak."
},
{
"id": 460,
"field": "summary (four crime scenes)",
"status": "RESOLVED",
"issue": "Summary names four locations. Sources say police investigated four locations but never say which four.",
"recommended": "Replace the invented list with 'police processed four crime scenes; the locations were not specified in reporting'.",
"action": "Replace the invented list of four named locations with 'police processed four crime scenes; the locations were not specified in reporting'."
},
{
"id": 460,
"field": "weapons",
"status": "RESOLVED",
"issue": "Flag is null, yet police pursue the case as armed robbery. No source describes a weapon; the restraints were plastic cuffs. Policy question: does the flag follow the reporting or the charge?",
"note": "Sofia already ruled on 462 that imitation weapons count as armed when used to intimidate. This is the inverse case.",
"action": "Set weapons = 1, following the charge. Add a note that no source describes a weapon; the only restraints described are plastic handcuffs and the only violence is punches and kicks.",
"rule": "Sofia's ruling: where police pursue a case as armed robbery, assume weapons were involved. Applies generally, not just here."
},
{
"id": 460,
"field": "summary (name and ownership)",
"status": "RESOLVED",
"action": "Replace the name with 'Russian national, initials A.I., 41'. Replace 'owner of Hedonist Restaurant' with 'was returning from Hedonist Restaurant'. Note both details are sourced only to social media."
},
{
"id": 460,
"field": "sources",
"status": "RESOLVED",
"action": "Add the ANTARA article, which carries the official Bali Police statement and is the only evidence for Villa Ukulele."
},
{
"id": 461,
"field": "summary (weapons)",
"status": "RESOLVED",
"issue": "Summary says 'held at gunpoint'. The NYPD bulletin says the three 'brandished firearms'.",
"recommended": "Keep the firearm detail but use NYPD's own word, brandished. 'Gunpoint' is an embellishment.",
"action": "Use NYPD's own word: the three 'brandished firearms'. Drop 'held at gunpoint'."
},
{
"id": 461,
"field": "summary (device)",
"status": "RESOLVED",
"issue": "Summary asserts a 'Ledger device'. Neither NYPD nor Hoodline names a brand; Hoodline hedges with 'a so-called cryptocurrency ledger'.",
"recommended": "Remove the brand.",
"action": "Remove the Ledger brand. Record only that attackers demanded a 'cryptocurrency ledger', as police phrased it."
},
{
"id": 462,
"field": "url_2",
"status": "RESOLVED",
"action": "No change. The YouTube link is deliberate; Brazilian outlets describe this victim as both influencer and businessman."
},
{
"id": 462,
"field": "weapons",
"status": "RESOLVED",
"action": "Keep weapons = 1 and add a note that the weapons used in the abduction were imitation police props; a real firearm appears only in the later police chase."
},
{
"id": 457,
"field": "url_3",
"status": "RESOLVED",
"action": "Replace the Spanish Cryptopolitan link with the English original: https://www.cryptopolitan.com/france-arrests-crypto-robbers-marseille/",
"note": "The agent fetched both and confirmed the Spanish edition is a faithful translation. Using the original removes any need to re-verify the translation."
},
{
"id": 457,
"field": "url_2 (La Provence)",
"status": "RESOLVED",
"action": "Leave the link. Mark it permanently PARTIAL: 75% paywalled, and unreachable by the fetch tool, by archive.org, and by Sofia. Only the opening quarter will ever be on file.",
"note": "Its retrievable portion covers case 457 only; it evidences nothing for 458."
},
{
"id": 458,
"field": "url_3",
"status": "RESOLVED",
"action": "Replace the Spanish Cryptopolitan link with the English original: https://www.cryptopolitan.com/france-arrests-crypto-robbers-marseille/",
"note": "The agent fetched both and confirmed the Spanish edition is a faithful translation. Using the original removes any need to re-verify the translation."
},
{
"id": 458,
"field": "url_2 (La Provence)",
"status": "RESOLVED",
"action": "Leave the link. Mark it permanently PARTIAL: 75% paywalled, and unreachable by the fetch tool, by archive.org, and by Sofia. Only the opening quarter will ever be on file.",
"note": "Its retrievable portion covers case 457 only; it evidences nothing for 458."
},
{
"id": 441,
"field": "fetched sources (url_2, url_3)",
"status": "PENDING",
"issue": "Semantic audit: both fetched sources (ctvnews.ca, noovo.info) describe case 438's 28 Jan home invasion, not 441's March dodged-attack. 441 has no valid fetched article for its own incident; the covering source (journaldemontreal) is blocked.",
"action_options": "Re-fetch journaldemontreal manually; and decide whether the two off-case sources stay linked (they are real sources for 438) or are removed from 441."
},
{
"id": 295,
"field": "url_3 (forbes.com)",
"status": "PENDING",
"issue": "Semantic audit: a 2020 Forbes halving-speculation piece that predates the incident and never describes it. Off-case.",
"action_options": "Drop the source from case 295."
}
]
}
merge-output/dump_cell.py
+27
View File
@@ -0,0 +1,27 @@
import sys, io, json, os
sys.stdout = io.TextIOWrapper(sys.stdout.buffer, encoding="utf-8", errors="replace")
sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
import build_cases as b
sheet = b.load_sheet()
records = json.loads(b.JSONF.read_text(encoding="utf-8"))
mapping = b.build_mapping(sheet, records)
row_by_id = {jid: row for row, jid in mapping.items()}
sheet_by_row = {r["_row"]: r for r in sheet}
targets = json.loads(sys.argv[1]) # list of [id, col]
for jid, col in targets:
row = row_by_id.get(jid)
print(f"\n===== case {jid} col={col} sheet_row={row} =====")
if row is None:
print(" NO SHEET ROW MAPPED")
continue
rec = sheet_by_row.get(row)
cell = rec.get(col)
if not isinstance(cell, str):
print(" CELL EMPTY / NON-STRING")
continue
lines = cell.split("\n")
for i, ln in enumerate(lines):
print(f"[{i}] {ln}")
merge-output/fetch_sources.py
+211
View File
@@ -0,0 +1,211 @@
"""
Stage source text for one or more cases.
Raw HTTP first, because that path is deterministic: the bytes come off the wire and
the extracted text is hashed, so it can be re-verified later. Sites that refuse a raw
request are recorded as BLOCKED and left for the WebFetch path, which is a model
transcription and must be labelled as such.
Nothing here writes to case files. Output goes to merge-output/staging/.
"""
import argparse
import gzip
import hashlib
import json
import re
import urllib.error
import urllib.request
import zlib
from datetime import datetime, timezone
from html.parser import HTMLParser
from pathlib import Path
BASE = Path(__file__).resolve().parent
JSONF = BASE.parent / "attacks-export-Gart-website.json"
STAGING = BASE / "staging"
UA = ("Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 "
"(KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36")
NOT_ARTICLE = re.compile(r"(youtube\.com|youtu\.be|x\.com|twitter\.com|instagram\.com|"
r"facebook\.com|tiktok\.com|t\.me)", re.I)
# Furniture that survives tag-stripping and has to go by content, not markup.
JUNK = re.compile(r"^(facebook|instagram|linkedin|rss|twitter|x|whatsapp|telegram|share|"
r"compartilhar|publicidade|advertisement|newsletter|cookies?|assine|"
r"leia (também|mais)|read more|related( articles)?|tags?|"
r"siga o|follow us|subscribe)\b", re.I)
class Extract(HTMLParser):
"""Pull block-level text.
Deliberately simple. Suppression is tracked with a stack of the tag names that
opened it, so a container that never closes cleanly cannot swallow the rest of the
document. Furniture is removed by content afterwards, not by guessing at CSS class
names, because class conventions differ on every site and a wrong guess here fails
silently by returning an empty page.
"""
DROP = {"script", "style", "noscript", "nav", "header", "footer", "aside",
"form", "svg", "button", "figure", "iframe", "select"}
BLOCK = {"p", "h1", "h2", "h3", "h4", "li", "blockquote", "div", "section", "br"}
def __init__(self):
super().__init__(convert_charrefs=True)
self.stack = []
self.cur = []
self.blocks = []
def handle_starttag(self, tag, attrs):
if tag in self.DROP:
self.stack.append(tag)
return
if tag in self.BLOCK:
self._flush()
def handle_endtag(self, tag):
if self.stack and self.stack[-1] == tag:
self.stack.pop()
return
if not self.stack and tag in self.BLOCK:
self._flush()
def handle_data(self, data):
if not self.stack:
self.cur.append(data)
def _flush(self):
if self.cur:
t = re.sub(r"[ \t\xa0]+", " ", "".join(self.cur)).strip()
if t:
self.blocks.append(t)
self.cur = []
def text(self):
self._flush()
out, seen = [], set()
for t in self.blocks:
if len(t) < 40 and not re.search(r"[.!?]$", t):
continue # nav labels, buttons, breadcrumbs
if JUNK.match(t):
continue
if t in seen:
continue
seen.add(t)
out.append(t)
return "\n\n".join(out)
def fetch_raw(url, timeout=30):
req = urllib.request.Request(url, headers={
"User-Agent": UA,
"Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
"Accept-Language": "en,pt;q=0.9,fr;q=0.8,id;q=0.7,es;q=0.6",
})
with urllib.request.urlopen(req, timeout=timeout) as r:
raw = r.read()
enc = (r.headers.get("Content-Encoding") or "").lower()
if enc == "gzip":
raw = gzip.decompress(raw)
elif enc == "deflate":
raw = zlib.decompress(raw)
charset = r.headers.get_content_charset() or "utf-8"
return r.status, raw.decode(charset, errors="replace"), r.geturl()
def stage_case(rec, extra_urls=(), new_only=False):
cid = rec["id"]
out = STAGING / f"{cid:03d}"
out.mkdir(parents=True, exist_ok=True)
entries = []
# Re-fetching a source that is already staged is pure cost, and worse: live pages
# add and drop teasers, so the paragraph indices in an approved cut silently shift.
# With --new-only, anything already fetched is carried over untouched.
prior = {}
idx_path = out / "index.json"
if new_only and idx_path.exists():
prior = {e["field"]: e for e in json.loads(idx_path.read_text(encoding="utf-8"))}
urls = [(f, rec[f]) for f in ("url", "url_2", "url_3", "url_4", "url_5") if rec.get(f)]
urls += [(f"extra_{i+1}", u) for i, u in enumerate(extra_urls)]
for n, (field, url) in enumerate(urls, 1):
host = re.sub(r"^https?://(www\.)?([^/]+).*", r"\2", url)
if field in prior and prior[field].get("verdict") in ("FETCHED", "NOT AN ARTICLE"):
carried = dict(prior[field])
carried["carried_over"] = True
entries.append(carried)
continue
e = {"case": cid, "n": n, "field": field, "url": url, "host": host,
"fetched_at": datetime.now(timezone.utc).isoformat(timespec="seconds")}
if NOT_ARTICLE.search(url):
e.update(verdict="NOT AN ARTICLE", method="none",
note="video or social post; recorded as a source reference, not transcribed")
entries.append(e)
continue
try:
status, html, final = fetch_raw(url)
text = Extract()
text.feed(html)
body = text.text()
if len(body) < 400:
e.update(verdict="THIN", method="raw", http=status, chars=len(body),
note="extractor recovered very little; needs the WebFetch path or a "
"site-specific rule")
else:
e.update(verdict="FETCHED", method="raw", http=status, chars=len(body),
sha256=hashlib.sha256(body.encode()).hexdigest(),
final_url=final if final != url else None)
(out / f"{n:02d}_{re.sub(r'[^a-z0-9]+', '-', host.lower())}.txt").write_text(
body, encoding="utf-8")
except urllib.error.HTTPError as ex:
e.update(verdict="BLOCKED" if ex.code in (401, 403, 429) else "DEAD",
method="raw", http=ex.code,
note="raw request refused; try the WebFetch path, which is a model "
"transcription and must be labelled as such")
except Exception as ex:
e.update(verdict="ERROR", method="raw", note=f"{type(ex).__name__}: {str(ex)[:120]}")
entries.append(e)
(out / "index.json").write_text(json.dumps(entries, ensure_ascii=False, indent=2),
encoding="utf-8")
return entries
def main():
ap = argparse.ArgumentParser()
ap.add_argument("cases", nargs="+", type=int)
ap.add_argument("--extra", action="append", default=[],
help="CASEID=URL for a source not on the record")
ap.add_argument("--new-only", action="store_true",
help="skip sources already staged; use this whenever adding a source to "
"a case that has approved cuts, or their paragraph indices will drift")
args = ap.parse_args()
extra = {}
for spec in args.extra:
cid, _, url = spec.partition("=")
extra.setdefault(int(cid), []).append(url)
records = {r["id"]: r for r in json.loads(JSONF.read_text(encoding="utf-8"))}
STAGING.mkdir(exist_ok=True)
for cid in args.cases:
entries = stage_case(records[cid], extra.get(cid, ()), new_only=args.new_only)
print(f"\ncase {cid}")
for e in entries:
bits = "carried" if e.get("carried_over") else (f"HTTP {e.get('http')}" if e.get("http") else "")
size = f"{e['chars']:,} chars" if e.get("chars") else ""
print(f" [{e['verdict']:<15}] {e['field']:<8} {e['host']:<26} {bits:<9} {size}")
if e.get("note"):
print(f" {e['note']}")
if __name__ == "__main__":
main()
merge-output/make_findings.py
+162
View File
@@ -0,0 +1,162 @@
"""
Fact-check findings from the contradiction pass on cases 456-461.
Written as a script so quoting cannot corrupt the JSON. Every finding carries the
line that evidences it. Absence claims are scoped to the sources on that record.
Nothing here is applied automatically. These are for the website database.
"""
import json
from pathlib import Path
OUT = Path(__file__).resolve().parent / "fact-check-findings.json"
F = [
# ---------------- case 459 : highest severity ----------------
{"case": 459, "severity": "CRITICAL", "field": "victim / summary",
"record": "Names the victims 'Stephanie Mau-Asum and Astrid Robinson'; the summary adds "
"'Stephanie Adriana Mau-Asum (Dutch)' and 'Astrid Robinson Bracho (Venezuelan)'.",
"sources": "None of the four articles names either woman. Geo News: 'the two victims, one "
"from the Netherlands and the other from Venezuela.' ProPakistani calls them "
"'the women', 'the complainant', 'her companion'.",
"why_it_matters": "These are named complainants in an alleged sexual assault. The names are "
"not supported by any source on the record.",
"action": "Remove the names pending a primary source, or record where they came from."},
{"case": 459, "severity": "HIGH", "field": "victim nationality",
"record": "Second victim recorded as Venezuelan.",
"sources": "Geo News and Abb Takk say Venezuela. Daily Pakistan and ProPakistani, both "
"published later on 3 July, say Spain: 'nationals of the Netherlands and Spain'.",
"action": "Sources disagree. Record the disagreement rather than picking a side silently."},
{"case": 459, "severity": "HIGH", "field": "summary (attackers)",
"record": "'Muhammad Raza Dar, his cousin Sikander, and three associates'.",
"sources": "ProPakistani: 'the women were abducted by the suspect, his boss, and three "
"other men'. No source names a Sikander or describes a cousin.",
"action": "Remove the invented name and relationship. Same pattern as case 460's "
"fabricated four-location list."},
{"case": 459, "severity": "HIGH", "field": "summary (political context)",
"record": "'politically sensitive given Dar's family connection to Deputy PM Ishaq Dar'.",
"sources": "No article names Ishaq Dar. Geo News says Dar is 'the grandson of a "
"high-profile political bigwig' and refers to the deputy prime minister without "
"naming him.",
"action": "Remove the name. Naming a serving politician on no source is a legal exposure."},
{"case": 459, "severity": "HIGH", "field": "summary (police action)",
"record": "'Punjab CM suspended SHO Defence C for negligence'.",
"sources": "No article reports any suspension. Geo News reports the opposite emphasis: "
"'Clear directives were issued by the Chief Minister of Punjab to ensure that "
"the police act solely in accordance with the law'.",
"action": "Remove."},
{"case": 459, "severity": "HIGH", "field": "violence_torture",
"record": "States sexual assault of both women as settled fact.",
"sources": "ProPakistani: 'initial police questioning indicated that rape had also taken "
"place, while medical examinations of the victims had been carried out and "
"reports were awaited.' The allegations are also asymmetric: 'her companion was "
"raped multiple times, and that an attempt was also made to rape her'.",
"action": "Mark as alleged and pending medical confirmation. Do not flatten the two "
"victims into one identical claim."},
{"case": 459, "severity": "MEDIUM", "field": "scenario / notes",
"record": "Presented as a straightforward kidnapping after a malicious invitation.",
"sources": "Two of four sources report police investigating a staged kidnapping. Daily "
"Pakistan: 'a staged kidnapping scenario was created to mislead authorities, "
"during which the main suspect reportedly portrayed himself as one of the "
"victims.'",
"action": "Add the alternate police theory. Its absence changes how the case reads."},
# ---------------- case 456 ----------------
{"case": 456, "severity": "HIGH", "field": "summary (violence)",
"record": "'Victim pistol-whipped (coronhada) during abduction'.",
"sources": "No article contains 'coronhada' or describes a pistol-whipping. Serra "
"Noticiario attributes his only injuries to the escape: 'O empresario "
"apresentava apenas escoriacoes causadas pela queda durante a fuga.'",
"action": "Remove. This is a fabricated violence detail contradicted by the one source "
"that addresses his injuries."},
{"case": 456, "severity": "HIGH", "field": "summary (network claim)",
"record": "'Investigation led to broader operation against a drug trafficking and money "
"laundering network in Espirito Santo and Bahia'.",
"sources": "No article makes this claim. An unrelated teaser headline sat inside the Sim "
"Noticias page: 'Gari que movimentou R$ 4 milhoes e alvo de operacao no ES e "
"BA', about a street sweeper in a different case.",
"action": "Remove. The bulk import appears to have absorbed a neighbouring headline as a "
"fact about this case."},
{"case": 456, "severity": "HIGH", "field": "summary (victim record)",
"record": "Victim described as having 'no criminal record'.",
"sources": "No article says anything about the victim's record. Acessa reports the "
"ARRESTED SUSPECT has one: 'Ele possui antecedentes criminais por trafico de "
"drogas.'",
"action": "Remove. A suspect's criminal record has been attached to the victim."},
{"case": 456, "severity": "MEDIUM", "field": "money_wanted / coin_type",
"record": "R$15,000 (~$3,000 USD). coin_type restates the same currency figure instead of "
"naming a coin.",
"sources": "Sim Noticias and A Tribuna say R$15,000. Serra Noticiario says '3.700 USDT "
"(Tether), valor equivalente a aproximadamente R$ 20 mil' and is the only "
"source naming an actual coin.",
"action": "Sources disagree on the amount. Also put USDT in coin_type, which currently "
"holds a fiat figure."},
{"case": 456, "severity": "MEDIUM", "field": "summary (attack structure)",
"record": "'Approximately eight suspects total operating in three coordinated vehicles: "
"white HB20 (blocker), silver Celta (abduction vehicle), and a third vehicle'.",
"sources": "The third vehicle is the victim's own Porsche, under attacker control only "
"after the abduction. No source describes a pre-positioned third car or the "
"per-attacker role breakdown.",
"action": "Correct. Invented specificity."},
{"case": 456, "severity": "LOW", "field": "description / summary",
"record": "'Porsche 718'; self-description 'Forex, crypto and proprietary trading desk'; "
"'seven at large as of June 16, 2026'; 'approximately 82,000 Instagram followers'.",
"sources": "No article gives a Porsche model number. Serra Noticiario supports only "
"'investidor de alto risco'. No article carries the date 16 June. Acessa says "
"'mais de 81 mil seguidores', an open lower bound.",
"action": "Remove the model number, the invented quote and the date; soften the follower "
"figure."},
{"case": 456, "severity": "LOW", "field": "arrests / seizure",
"record": "One arrested; three magazines seized.",
"sources": "Sim Noticias: 'Ate o momento, ninguem foi preso.' Acessa and A Tribuna report "
"one 25-year-old arrested. On the seizure, Acessa and A Tribuna say 'tres "
"carregadores', Serra Noticiario says 'um carregador'.",
"action": "Probably a same-day timing difference on arrests. The magazine count is a "
"genuine source disagreement."},
# ---------------- cases 457 / 458 ----------------
{"case": 457, "severity": "MEDIUM", "field": "notes",
"record": "'The plate led investigators to the same four men later arrested during the "
"Gignac-la-Nerthe incident the same night' — stated as established causation.",
"sources": "Cryptopolitan frames it conditionally: the plate 'podria ser la clave' to a "
"wider network. Journal du Coin and La Provence narrate the two scenes in "
"sequence without asserting the link.",
"action": "Soften to what the sources support."},
{"case": 457, "severity": "LOW", "field": "date",
"record": "13 June 2026.",
"sources": "Journal du Coin and La Provence both say 'samedi 13 juin'. Cryptopolitan says "
"'sabado 14 de junio', which also contradicts itself since 13 June was the "
"Saturday.",
"action": "Record is right; Cryptopolitan is wrong. No change."},
{"case": 458, "severity": "MEDIUM", "field": "kidnappings",
"record": "kidnappings = 1.",
"sources": "Journal du Coin: 'sequestrent deux femmes, dont une sexagenaire.' Two women "
"were held.",
"action": "Schema question, not a data error: does the field count victims or incidents? "
"Settle it and apply consistently, since it affects every aggregate."},
{"case": 458, "severity": "LOW", "field": "sources",
"record": "La Provence is linked to this case.",
"sources": "Its retrievable quarter covers only the sibling case 457. The Gignac material, "
"if any, is behind the paywall.",
"action": "Keep the link, but note it currently evidences 457 rather than 458."},
# ---------------- case 461 ----------------
{"case": 461, "severity": "MEDIUM", "field": "summary (weapons)",
"record": "'Held at gunpoint'; 'Firearms presented during confrontation'.",
"sources": "Hoodline says only 'three armed men' and 'the suspects were armed'. No weapon "
"type is given. The weapons=1 flag is fine; the specificity is not.",
"action": "Soften to 'armed', or source the firearm claim from the NYPD post."},
{"case": 461, "severity": "LOW", "field": "summary (device)",
"record": "'Hardware wallet (Ledger device) demanded'.",
"sources": "Hoodline hedges: 'An attempted stickup over a so-called cryptocurrency "
"ledger'. The brand is not confirmed.",
"action": "Do not assert a brand the source puts in scare quotes."},
]
OUT.write_text(json.dumps(F, ensure_ascii=False, indent=2), encoding="utf-8")
from collections import Counter
print(f"wrote {len(F)} findings -> {OUT.name}")
print(" by severity:", dict(Counter(f["severity"] for f in F)))
print(" by case :", dict(sorted(Counter(f["case"] for f in F).items())))
merge-output/make_translations.py
+99
View File
@@ -0,0 +1,99 @@
"""
English translations for non-English staged sources.
These are DERIVED text, produced by a model. The original stays in
sourced-articles.json and is the archive. Written here as a script rather than
hand-edited JSON so quoting and escaping cannot corrupt them.
"""
import json
from pathlib import Path
OUT = Path(__file__).resolve().parent / "translations.json"
T = {}
T["462:url"] = """Fake police officers kidnap influencer and steal US$750,000 in cryptocurrency in Ribeirao Preto
One of the suspects was arrested the same day, but the other remains at large
Two men posed as civil police officers in order to get into a hotel and kidnap an 18-year-old influencer. According to the investigation, the pair took around R$750,000 in cryptocurrency from the victim.
The operation was filmed by a hotel employee, at the urging of the suspects themselves, who were trying to lend the fake arrest an air of legitimacy.
The case resembles another that took place in March in France, when criminals posed as police officers to steal R$5.4 million in Bitcoin from a couple in their own home.
Buy Bitcoin and cryptocurrency at the largest investment bank in Latin America. Visit Mynt.com.br
Images show moments from the suspects' operation
According to reporting by Cidade Alerta, the case took place at a hotel in Ribeirao Preto, Sao Paulo, on 3 July, after the influencer travelled to the city to spend a romantic weekend with his girlfriend.
The video below, filmed by a hotel employee, shows the moment of the suspects' operation, wearing Civil Police clothing.
"Civil Police! Open the door! Open the door, you crook, go on! We are going to break the door down! Open the door!"
In one section it is even possible to see a piece of paper that was presented as an arrest warrant. "You will see the arrest warrant at the police station, when you get it with your lawyer, all right, handsome?" said one suspect when asked the reason for the arrest.
After handcuffing the victim, the pair went down in the lift, put the influencer in the back seat of an ordinary car with no police markings, and left the scene.
"An officer is going to come down to take a look at the room. You can leave it as it is. Do not touch anything, because there is probably going to be something else in there. As you saw, he has already got rid of his phone, he already threw it in the water."
One of the suspects was arrested the same day, the other remains at large
According to police inquiries, the criminals had been following the victim's routine through his social media, and so knew that he invested in cryptocurrency.
During the operation, the suspects are alleged to have stolen R$750,000 in cryptocurrency before releasing the influencer.
Because of the footage above, which shows the suspects' faces and the number plate of the car used, the Military Police were able to stop the vehicle in question on the Anhanguera highway.
"During the stop, two sets of handcuffs were found and a firearm case in the boot, but empty. The individual said the gun was under the seat. During the stop, realising they were going to be detained, they ended up resisting. The driver of the Nivus fled in the Nivus after trying to take the highway officer's gun," said chief inspector Robson Goncalves to Cidade Alerta.
One of the suspects exchanged gunfire with police in Pirassununga but managed to escape. The second fled on foot into wooded terrain, but was captured later.
Finally, Goncalves says the second suspect called an Uber to pick him up, but thanks to facial recognition they were able to stop the vehicle and arrest the man identified as Matheus Vinicius de Jesus dos Santos."""
T["462:extra_1"] = """Influencer kidnapped after fake police stop and loses R$800,000 in cryptocurrency - ACidade ON Ribeirao Preto
Influencer kidnapped after fake police stop and loses R$800,000 in cryptocurrency
According to the police investigation, the influencer was forced to transfer R$800,000 to the criminals
By:
Sergio Linhares, under newsroom supervision
13/07/2026 - at 14h08
Civil Police are investigating a fake police stop on an 18-year-old influencer at a hotel in Ribeirao Preto.
Two men, disguised as civil police officers, handcuffed the young man, put him in the boot and transported him to Cravinhos.
In Cravinhos the influencer was forced to transfer approximately R$800,000 in cryptocurrency to the criminals.
One suspect was detained on 3 July; the other remains at large, according to chief inspector Jose Carvalho de Araujo Junior.
The Civil Police are investigating the kidnapping of an 18-year-old digital influencer, which took place on 3 July in Ribeirao Preto. According to the inquiries, two men posed as civil police officers in order to approach the young man at a hotel in the city.
After the fake stop, the suspects handcuffed him, put the victim in the boot of a car and took him to Cravinhos, where they forced him to transfer around R$800,000 in cryptocurrency.
Get acidade on Ribeirao news on WhatsApp and keep up with everything! Just follow the link here!
According to the investigation, the criminals monitored the influencer through social media and used the information the young man published to work out his routine and where he was staying in Ribeirao Preto.
The inquiries indicate that both the victim and the suspects are residents of the city of Sao Paulo.
How did the crime happen?
Chief inspector Jose Carvalho de Araujo Junior gave more detail about the operation.
"They identified, in a certain way, that this victim dealt in cryptocurrency. And, knowing that, they dressed themselves up as civil police officers and managed to get into the hotel, they took this person away, the victim is an 18-year-old who deals in cryptocurrency. This person was then taken away in a vehicle and forced to transfer sums to these criminals."
One of the suspects was detained on 3 July, while the second remains at large. As the pair's identity has not been released, it was not possible to contact their respective defence lawyers. The chief inspector in charge stressed that inquiries continue in order to establish whether other people took part in the crime.
"The police are working out whether there are other people involved, even though this inquiry is already being closed and an arrest has been made. Our job now is to find out whether there are other people involved or not." """
OUT.write_text(json.dumps(T, ensure_ascii=False, indent=2), encoding="utf-8")
print(f"wrote {len(T)} translations")
for k, v in T.items():
print(f" {k:<16} {len(v):,} chars")
merge-output/phase1_merge.py
+203
View File
@@ -0,0 +1,203 @@
"""
Phase 1: copy saved article text from reported_K&R into the exported JSON.
Deterministic and verbatim. No model in the loop, so every write is checkable:
each copied field is hashed at source and destination and the two must agree.
Inputs are never modified. Everything is written to merge-output/.
"""
import hashlib
import json
import re
import unicodedata
from collections import defaultdict
from pathlib import Path
import openpyxl
BASE = Path(__file__).resolve().parent
SRC = BASE.parent
XLSX = SRC / "KR-reports_analysis_Sofi.xlsx"
JSONF = SRC / "attacks-export-Gart-website.json"
MERGED = BASE / "attacks-merged.json"
MANIFEST = BASE / "verification-manifest.json"
EXCEPTIONS = BASE / "exceptions-for-review.json"
ARTICLE_COLS = [("Articles", "article_1"), ("Article 2", "article_2"), ("Article 3", "article_3")]
MIN_LEN = 200 # below this a cell is a note or a stray URL, not an article body
def norm(s):
if s is None:
return ""
s = unicodedata.normalize("NFKD", str(s))
s = "".join(c for c in s if not unicodedata.combining(c))
s = re.sub(r"[^a-z0-9 ]", " ", s.lower())
return re.sub(r"\s+", " ", s).strip()
def sha(text):
return hashlib.sha256(text.encode("utf-8")).hexdigest()
def year_of(v):
try:
return int(float(v))
except (TypeError, ValueError):
return None
def load_sheet():
wb = openpyxl.load_workbook(XLSX, data_only=True, read_only=True)
ws = wb["reported_K&R"]
rows = list(ws.iter_rows(values_only=True))
idx = {h: i for i, h in enumerate(rows[0]) if h is not None}
out = []
for n, r in enumerate(rows[1:], start=2):
if not (r[idx["Victim"]] or r[idx["Date"]]):
continue
rec = {"_row": n}
for h, i in idx.items():
rec[h] = r[i]
out.append(rec)
wb.close()
return out
def articles_in(row):
"""Substantive article bodies present on this sheet row."""
found = {}
for col, dest in ARTICLE_COLS:
v = row.get(col)
if isinstance(v, str) and len(v.strip()) >= MIN_LEN:
found[dest] = v
return found
def main():
sheet = load_sheet()
records = json.loads(JSONF.read_text(encoding="utf-8"))
# Key on normalised victim name + year. Only 1:1 keys are trusted;
# anything ambiguous is deliberately left for human adjudication.
s_by_key = defaultdict(list)
for row in sheet:
s_by_key[(norm(row.get("Victim")), year_of(row.get("Year")))].append(row)
j_by_key = defaultdict(list)
for rec in records:
j_by_key[(norm(rec.get("victim")), rec.get("year"))].append(rec)
unambiguous = {
k for k in set(s_by_key) & set(j_by_key)
if len(s_by_key[k]) == 1 and len(j_by_key[k]) == 1
}
manifest = []
exceptions = []
copied_fields = 0
copied_chars = 0
matched_rows = 0
for row in sheet:
arts = articles_in(row)
if not arts:
continue
key = (norm(row.get("Victim")), year_of(row.get("Year")))
if key not in unambiguous:
# Give the adjudicator everything it needs to decide, plus candidates.
cands = []
for rec in records:
same_name = norm(rec.get("victim")) == key[0]
same_slot = rec.get("year") == key[1] and norm(rec.get("country")) == norm(row.get("Country"))
if same_name or same_slot:
cands.append({
"id": rec["id"],
"victim": rec.get("victim"),
"date": rec.get("date"),
"country": rec.get("country"),
"location": rec.get("location"),
"scenario": rec.get("scenario"),
"description": rec.get("description"),
"url": rec.get("url"),
})
exceptions.append({
"sheet_row": row["_row"],
"victim": row.get("Victim"),
"date": str(row.get("Date")),
"year": key[1],
"country": row.get("Country"),
"location": row.get("Location"),
"scenario": row.get("Scenario"),
"description": row.get("Description"),
"url": row.get("URL"),
"reports": row.get("REPORTS"),
"article_fields_waiting": sorted(arts),
"article_chars": {k: len(v) for k, v in arts.items()},
"candidates": cands,
"reason": "ambiguous or absent 1:1 match on (victim, year)",
})
continue
rec = j_by_key[key][0]
matched_rows += 1
for dest, text in arts.items():
rec[dest] = text
copied_fields += 1
copied_chars += len(text)
manifest.append({
"json_id": rec["id"],
"field": dest,
"sheet_row": row["_row"],
"sheet_column": next(c for c, d in ARTICLE_COLS if d == dest),
"chars": len(text),
"sha256_source": sha(text),
})
# Provenance. article_1 came from the row whose URL column is recorded;
# article_2 / article_3 have no URL stored in the sheet.
rec["article_provenance"] = {
"sheet": "reported_K&R",
"row": row["_row"],
"sheet_url": row.get("URL"),
"sheet_reports": row.get("REPORTS"),
"fields": sorted(arts),
}
# Verify against what actually landed in the output objects.
by_id = {r["id"]: r for r in records}
mismatches = []
for m in manifest:
got = by_id[m["json_id"]].get(m["field"])
if got is None or sha(got) != m["sha256_source"]:
mismatches.append(m)
MERGED.write_text(json.dumps(records, ensure_ascii=False, indent=2), encoding="utf-8")
summary = {
"sheet_rows_with_articles": sum(1 for r in sheet if articles_in(r)),
"sheet_rows_merged": matched_rows,
"sheet_rows_sent_to_review": len(exceptions),
"article_fields_copied": copied_fields,
"characters_copied": copied_chars,
"json_records_total": len(records),
"json_records_with_articles": sum(1 for r in records if "article_1" in r),
"hash_mismatches": len(mismatches),
}
MANIFEST.write_text(
json.dumps({"summary": summary, "mismatches": mismatches, "fields": manifest},
ensure_ascii=False, indent=2),
encoding="utf-8")
EXCEPTIONS.write_text(json.dumps(exceptions, ensure_ascii=False, indent=2), encoding="utf-8")
for k, v in summary.items():
print(f"{k:34} {v:,}" if isinstance(v, int) else f"{k:34} {v}")
print("\nVERIFICATION:", "PASS - every copied field matches its source hash"
if not mismatches else f"FAIL - {len(mismatches)} mismatched fields")
if __name__ == "__main__":
main()
merge-output/propose_cuts.py
+185
View File
@@ -0,0 +1,185 @@
"""
Propose where a case's article starts and stops in each staged file, using the case
record itself as the anchor.
The earlier version took the longest contiguous run of body-like paragraphs. That fails
on two shapes seen in real pages:
- a page carrying several stories, where the longest run is a DIFFERENT article
(A Gazeta on case 456 opened on an unrelated arrest for threatening a relative)
- an article whose key paragraph sits after a short sentence, so the run stops early
(A Tribuna on case 456 truncated three paragraphs before the only line it was added for)
So: score every paragraph by how many case-specific terms it contains, drawn from the
database record. Seed on the best-scoring paragraph and grow outward through body-like
text, stopping at teaser runs. A page whose paragraphs never mention the case at all is
flagged OFF-CASE, which is the deterministic half of the Phuket trap.
Emits exact anchors so apply_sources.py can guard against paragraph drift without
anyone retyping them.
"""
import io
import json
import re
import sys
import unicodedata
from pathlib import Path
BASE = Path(__file__).resolve().parent
STAGING = BASE / "staging"
JSONF = BASE.parent / "attacks-export-Gart-website.json"
PAYWALL = re.compile(
r"(il vous reste|% à lire|reste \d+% |assinante|already a subscriber|"
r"subscribe to (read|continue)|log ?in to (read|continue)|para continuar lendo|"
r"conteúdo exclusivo|abonnez-vous|déjà abonné)", re.I)
JUNK = re.compile(
r"(cookie|adblock|bloqueador de an|javascript n|termos de uso|terms of use|"
r"all rights reserved|todos os direitos|aviso legal|disclaimer|©|newsletter|"
r"receba as principais|participe da nossa|join the groups|login page|please log in|"
r"follow us|leia também|à lire aussi|is a writer|escritora y editora|"
r"contact us|about us|sabe de alguma coisa)", re.I)
STOP = {"the", "and", "for", "was", "were", "with", "his", "her", "man", "men", "woman",
"unidentified", "undisclosed", "unknown", "multiple", "victim", "repeat", "family",
"crypto", "cryptocurrency", "bitcoin", "old", "year", "y/o", "de", "da", "do", "la",
"le", "el", "en", "un", "una", "and"}
MONTHS = {
1: ["january", "janeiro", "janvier", "enero"], 2: ["february", "fevereiro", "février", "febrero"],
3: ["march", "março", "mars", "marzo"], 4: ["april", "abril", "avril"],
5: ["may", "maio", "mai", "mayo"], 6: ["june", "junho", "juin", "junio"],
7: ["july", "julho", "juillet", "julio"], 8: ["august", "agosto", "août"],
9: ["september", "setembro", "septembre", "septiembre"], 10: ["october", "outubro", "octobre", "octubre"],
11: ["november", "novembro", "novembre", "noviembre"], 12: ["december", "dezembro", "décembre", "diciembre"],
}
def fold(s):
s = unicodedata.normalize("NFKD", str(s or ""))
return "".join(c for c in s if not unicodedata.combining(c)).lower()
def case_terms(rec):
"""Distinctive strings that should appear in an article about THIS case."""
terms = set()
for field in ("victim", "location", "country"):
for tok in re.split(r"[^A-Za-z0-9]+", fold(rec.get(field))):
if len(tok) > 3 and tok not in STOP:
terms.add(tok)
if rec.get("month") in MONTHS:
terms.update(MONTHS[rec["month"]])
m = re.search(r"\b(\d{1,2})\b", str(rec.get("date") or ""))
if m:
terms.add(m.group(1))
for field in ("money_wanted", "description"):
for num in re.findall(r"\d[\d.,]{2,}", str(rec.get(field) or "")):
terms.add(fold(num))
# Distinctive nouns from the description carry most of the signal: a car model, a
# street, a company. Without them a bare "11" matches half of any news page.
for field in ("description", "notes"):
for tok in re.findall(r"\b[A-Z][A-Za-z0-9]{4,}\b", str(rec.get(field) or "")):
t = fold(tok)
if t not in STOP:
terms.add(t)
return {t for t in terms if t}
def score(para, terms):
f = fold(para)
return sum(1 for t in terms if t in f)
def bodyish(p):
p = p.strip()
return len(p) > 110 and re.search(r"[.!?”»\"]$", p) and not JUNK.search(p)
def propose(paras, terms, bridge=2):
"""Runs decide the boundaries; case terms decide which run.
Boundaries come from contiguous body text, tolerating up to `bridge` short lines so
a one-sentence paragraph cannot truncate an article. Selection then picks the run
that actually talks about this case, which is what a multi-story page needs.
"""
scores = [score(p, terms) for p in paras]
total_hits = sum(scores)
runs, cur, gap = [], [], 0
for i, p in enumerate(paras):
if bodyish(p):
cur.append(i)
gap = 0
elif cur and len(p.strip()) <= 200 and not JUNK.search(p) and gap < bridge:
cur.append(i)
gap += 1
else:
if cur:
runs.append(cur)
cur, gap = [], 0
if cur:
runs.append(cur)
if not runs:
return None, None, total_hits
def run_score(r):
# Distinct terms first: a long unrelated run accumulates raw hits just by being
# long, which is how A Gazeta's story about a woman threatening her relative beat
# the actual kidnapping. Density breaks ties; length only decides after that.
text = fold(" ".join(paras[i] for i in r))
distinct = sum(1 for t in terms if t in text)
chars = sum(len(paras[i]) for i in r) or 1
return (distinct, sum(scores[i] for i in r) / chars, chars)
best = max(runs, key=run_score)
start, end = best[0], best[-1]
# Trim bridged non-body lines off either end.
while start < end and not bodyish(paras[start]):
start += 1
while end > start and not bodyish(paras[end]):
end -= 1
return start, end, total_hits
def main():
sys.stdout = io.TextIOWrapper(sys.stdout.buffer, encoding="utf-8", errors="replace")
records = {r["id"]: r for r in json.loads(JSONF.read_text(encoding="utf-8"))}
out = {}
for case in sys.argv[1:]:
cid = int(case)
rec = records[cid]
terms = case_terms(rec)
print(f"\n### case {cid} terms: {' '.join(sorted(terms))[:110]}")
for f in sorted((STAGING / f"{cid:03d}").glob("*.txt")):
paras = f.read_text(encoding="utf-8").split("\n\n")
start, end, hits = propose(paras, terms)
flag = ""
if hits == 0:
flag = " !! OFF-CASE: no case term appears anywhere on this page"
elif hits < 3:
flag = f" !! WEAK: only {hits} case-term hits on the whole page"
pay = [p.strip()[:60] for p in paras if PAYWALL.search(p)]
title = paras[0].strip() if paras else ""
use_title = start not in (0, None) and 20 < len(title) < 200 and not JUNK.search(title)
key = f"{cid}:{f.name}"
out[key] = {"start": start, "end": end, "title": 0 if use_title else None,
"paras": len(paras), "case_term_hits": hits,
"starts_with": paras[start][:45] if start is not None else None,
"ends_with": paras[end][-55:] if end is not None else None,
"paywall": pay}
kept = len("\n\n".join(paras[start:end + 1])) if start is not None else 0
print(f" {f.name:34} {len(paras):>4} paras -> "
f"{'[0] + ' if use_title else ''}{start}..{end} {kept:>6,} chars hits={hits}{flag}")
if pay:
print(f" PAYWALL: {pay[0]}")
if start is not None:
print(f" starts: {paras[start][:88]}")
print(f" ends : {paras[end][-88:]}")
(STAGING / "proposed-cuts.json").write_text(json.dumps(out, ensure_ascii=False, indent=2),
encoding="utf-8")
print(f"\nwrote {len(out)} proposals with anchors -> staging/proposed-cuts.json")
if __name__ == "__main__":
main()
merge-output/proposed-auto-matches.json
+673
View File
@@ -0,0 +1,673 @@
[
{
"n": 1,
"sheet_row": 20,
"s_victim": "Unidentified",
"s_date": "2017-11-04",
"s_country": "USA",
"s_loc": "New York, New York",
"s_desc": "Man robbed of $1.8M of ETH",
"s_scen": "Kidnapping",
"fields": [
"article_1",
"article_2",
"article_3"
],
"chars": 6255,
"snippet": "Three men charged in $2M cryptocurrency kidnapping and robbery By Shayna Jacobs and Janon Fisher Jun 12, 2018 | 11:05 PM Three men charged in $2M cryptocurrency kidnapping. Cryptocurrency heist suspects were arraigned in Manhattan court Tuesday. MEMBERS OF a Bronx biker gang, one sporting a skull ta",
"j_id": 19,
"j_victim": "Unidentified",
"j_date": "November 4, 2017",
"j_country": "USA",
"j_loc": "New York, New York",
"j_desc": "Man robbed of $1.8M of ETH",
"j_scen": "Kidnapping"
},
{
"n": 2,
"sheet_row": 21,
"s_victim": "Unidentified",
"s_date": "2017-11-15",
"s_country": "Turkey",
"s_loc": "Istanbul, Turkey",
"s_desc": "Gang stole $2.83M in BTC from businessman",
"s_scen": "Authority Misuse",
"fields": [
"article_1"
],
"chars": 788,
"snippet": "Turkish police detain gang who stole bitcoins worth $2.83M According to reports, the gang, consisting of five people, posed as police and stopped the businessman's car and forced him to give out his passwords of online banking accounts at gunpoint. The businessman reportedly contacted the police fol",
"j_id": 20,
"j_victim": "Unidentified",
"j_date": "November 15, 2017",
"j_country": "Turkey",
"j_loc": "Istanbul, Turkey",
"j_desc": "Gang stole $2.83M in BTC from businessman",
"j_scen": "Authority Misuse"
},
{
"n": 3,
"sheet_row": 31,
"s_victim": "Unidentified",
"s_date": "2018-01-29",
"s_country": "USA",
"s_loc": "Cumming, Georgia",
"s_desc": "Five men arrested for planning armed home invasion of bitcoin owner",
"s_scen": "Dodged Attack",
"fields": [
"article_1"
],
"chars": 2644,
"snippet": "Five arrested in plot to break into Forsyth County home to steal Bitcoin Officials said five suspects had conspired to break into a Forsyth County home to steal Bitcoin. All are now in custody (upper row left to right): Trivette Adams; Robert South; Matthew Schwartz; (lower row): Michael McDermott, ",
"j_id": 30,
"j_victim": "Unidentified",
"j_date": "January 29, 2018",
"j_country": "USA",
"j_loc": "Cumming, Georgia",
"j_desc": "Five men arrested for planning armed home invasion of bitcoin owner",
"j_scen": "Dodged Attack"
},
{
"n": 4,
"sheet_row": 33,
"s_victim": "Sailesh Bhatt",
"s_date": "2018-02-09",
"s_country": "India",
"s_loc": "Amreli, India",
"s_desc": "Police Officers Beat, Extorted 200 BTC from Businessman",
"s_scen": "Authority Misuse",
"fields": [
"article_1",
"article_2",
"article_3"
],
"chars": 8602,
"snippet": "Gujarat cops kidnap Surat builder, extort Bitcoins worth Rs 13 crore Ten Gujarat cops allegedly kidnapped and extorted 200 Bitcoins worth Rs 13 crore from a Surat-based builder and businessman, making it possibly the first case of kidnapping involving cryptocurrency. advertisement In possibly the fi",
"j_id": 32,
"j_victim": "Shailesh Bhatt",
"j_date": "February 9, 2018",
"j_country": "India",
"j_loc": "Amreli, India",
"j_desc": "Police Officers Beat, Extorted 200 BTC from Businessman",
"j_scen": "Authority Misuse"
},
{
"n": 5,
"sheet_row": 36,
"s_victim": "Unidentified",
"s_date": "2018-02-23",
"s_country": "Russia",
"s_loc": "Moscow, Russia",
"s_desc": "Crypto investor has face mutilated, robbed of $1M in BTC",
"s_scen": "Assault - Mugging",
"fields": [
"article_1"
],
"chars": 771,
"snippet": "Moscow Man Mutilated And Mugged For $1 Million In Bitcoin, Local Sources Report A man has lost $1 mln worth of Bitcoin to muggers who attacked him when he refused to part with it, local sources report A cryptocurrency investor fell victim to unidentified assailants in Moscow who reportedly disfigure",
"j_id": 35,
"j_victim": "Unidentified",
"j_date": "February 23, 2018",
"j_country": "Russia",
"j_loc": "Moscow, Russia",
"j_desc": "Crypto investor has face mutilated, robbed of $1M in BTC",
"j_scen": "Assault - Mugging"
},
{
"n": 6,
"sheet_row": 45,
"s_victim": "Unidentified",
"s_date": "2018-06-19",
"s_country": "Austria",
"s_loc": "Wels, Austria",
"s_desc": "$250,000 in cryptocurrency taken by robbers posing as postmen",
"s_scen": "Authority Misuse",
"fields": [
"article_1",
"article_2"
],
"chars": 2413,
"snippet": "Court in Austria Begins Trial Against Crypto Robbery Gang In the Austrian city of Wels, five men must answer in court for a robbery and theft amounting to approximately 210,000 euros in cryptocurrency. The mastermind is reportedly a 21-year-old Upper Austrian who planned the robbery together with hi",
"j_id": 44,
"j_victim": "Unidentified",
"j_date": "June 19, 2018",
"j_country": "Austria",
"j_loc": "Wels, Austria",
"j_desc": "$250,000 in cryptocurrency taken by robbers posing as postmen",
"j_scen": "Authority Misuse"
},
{
"n": 7,
"sheet_row": 73,
"s_victim": "Undisclosed",
"s_date": "2020-10-22",
"s_country": "Latvia",
"s_loc": "Riga, Latvia",
"s_desc": "Man arrested for planning kidnapping and killing owners of cryptocurrencies",
"s_scen": "Dodged Attack",
"fields": [
"article_1",
"article_2"
],
"chars": 3106,
"snippet": "Latvian resident planned the murder of cryptocurrency owners for half a million euros The State Police of Latvia prevented the kidnapping and murder of two people planned by a criminal aiming to obtain cryptocurrency valued at about 500,000 euros. Law enforcement received information about the plann",
"j_id": 72,
"j_victim": "Undisclosed",
"j_date": "October 22, 2020",
"j_country": "Latvia",
"j_loc": "Riga, Latvia",
"j_desc": "Man arrested for planning kidnapping and killing owners of cryptocurrencies",
"j_scen": "Dodged Attack"
},
{
"n": 8,
"sheet_row": 75,
"s_victim": "Undisclosed",
"s_date": "2020-12-24",
"s_country": "Ukraine",
"s_loc": "Ternopil, Ukraine",
"s_desc": "Man kidnapped and tortured for $800k",
"s_scen": "Kidnapping",
"fields": [
"article_1",
"article_2"
],
"chars": 4810,
"snippet": "Operatives in Ternopil arrested a group who stole a car, deprived a man of his freedom, and extorted $800,000 from him Illegal deprivation of liberty, extortion, and illegal seizure of a vehicle are three articles of the Ukrainian Criminal Code under which law enforcement officers in Ternopil charge",
"j_id": 74,
"j_victim": "Undisclosed",
"j_date": "December 24, 2020",
"j_country": "Ukraine",
"j_loc": "Ternopil, Ukraine",
"j_desc": "Man kidnapped and tortured for $800k",
"j_scen": "Kidnapping"
},
{
"n": 9,
"sheet_row": 91,
"s_victim": "39 y/o man",
"s_date": "2021-06-24",
"s_country": "Netherlands",
"s_loc": "Leeuwarden, Netherlands",
"s_desc": "3 men posing as service technicians beat password out of Bitcoin owner",
"s_scen": "Authority Misuse",
"fields": [
"article_1"
],
"chars": 1765,
"snippet": "Robbery in Leeuwarden: 39-Year-Old Man Severely Beaten for Cryptocurrency On June 24, 2021, a 39-year-old resident of an apartment on Coopmansstraat in Leeuwarden was severely assaulted during a home invasion. The three perpetrators spent over an hour inside the apartment and stole valuable cryptocu",
"j_id": 90,
"j_victim": "39 y/o man",
"j_date": "June 24, 2021",
"j_country": "Netherlands",
"j_loc": "Leeuwarden, Netherlands",
"j_desc": "3 men posing as service technicians beat password out of Bitcoin owner",
"j_scen": "Authority Misuse"
},
{
"n": 10,
"sheet_row": 93,
"s_victim": "Unidentified man",
"s_date": "2021-07-01",
"s_country": "USA",
"s_loc": "Unknown",
"s_desc": "Bitcoin holder drugged and robbed by Tinder date",
"s_scen": "Malicious Invitation - SocialEng",
"fields": [
"article_1",
"article_2"
],
"chars": 10578,
"snippet": "Tinder Date Goes Bad in Attempted Crypto Grab A US man was drugged by a woman he met on Tinder who then attempted to steal his crypto. The man, who was a client of Casa, a company that offers heightened Bitcoin security, reported the attempted robbery to the Casa team, who performed a postmortem on ",
"j_id": 92,
"j_victim": "Unidentified man",
"j_date": "July 1, 2021",
"j_country": "USA",
"j_loc": "Unknown",
"j_desc": "Bitcoin holder drugged and robbed by Tinder date",
"j_scen": "Malicious Invitation - SocialEng"
},
{
"n": 11,
"sheet_row": 95,
"s_victim": "39 y/o man",
"s_date": "2021-07-28",
"s_country": "Hong Kong",
"s_loc": "Tsim Sha Tsui, Hong Kong",
"s_desc": "Trader robbed of HK$3 million at knifepoint",
"s_scen": "P2P Trade Gone Wrong",
"fields": [
"article_1"
],
"chars": 2310,
"snippet": "Bitcoin trader robbed of HK$3 million in cash when ‘sellers’ in Hong Kong show up with knife The 39-year-old trader from South Korea arrived for the exchange on Ashley Road in Tsim Sha Tsui At least five robberies or scams involving bitcoin have taken place in Hong Kong already this year. Photo: Fun",
"j_id": 94,
"j_victim": "39 y/o man",
"j_date": "July 28, 2021",
"j_country": "Hong Kong",
"j_loc": "Tsim Sha Tsui, Hong Kong",
"j_desc": "Trader robbed of HK$3 million at knifepoint",
"j_scen": "P2P Trade Gone Wrong"
},
{
"n": 12,
"sheet_row": 122,
"s_victim": "Unidentified man",
"s_date": "2022-03-02",
"s_country": "USA",
"s_loc": "Miami, Florida",
"s_desc": "Businessman ambushed by armed robber, has $1M watch & crypto wallet taken.",
"s_scen": "Armed Robbery in Public Space",
"fields": [
"article_1"
],
"chars": 2530,
"snippet": "Edgewater man says he’s out ‘about $1M’ after armed robber steals phone with crypto wallet app, pricey watch By Elitsa Bizios March 4, 2022 Share Play Video MIAMI (WSVN) - A South Florida businessman said he was ambushed by an armed robber who knew exactly what he wanted: his crypto wallet and his ",
"j_id": 121,
"j_victim": "Unidentified man",
"j_date": "March 2, 2022",
"j_country": "USA",
"j_loc": "Miami, Florida",
"j_desc": "Businessman ambushed by armed robber, has $1M watch & crypto wallet taken.",
"j_scen": "Armed Robbery in Public Space"
},
{
"n": 13,
"sheet_row": 127,
"s_victim": "Unidentified couple",
"s_date": "2022-04-21",
"s_country": "Sweden",
"s_loc": "Norrköping, Sweden",
"s_desc": "Couple tied up and beaten, forced to transfer cryptocurrency.",
"s_scen": "Home Invasion",
"fields": [
"article_1"
],
"chars": 731,
"snippet": "Banded and abused at home – robbed of cryptocurrency Updated yesterday 10:04Published yesterday 05:53 The police in Norrköping were alerted at 05:00 to an address west of the city. A couple had been tied up and beaten and subjected to an armed robbery at their home. The robbers allegedly forced the ",
"j_id": 126,
"j_victim": "Unidentified couple",
"j_date": "April 21, 2022",
"j_country": "Sweden",
"j_loc": "Norrköping, Sweden",
"j_desc": "Couple tied up and beaten, forced to transfer cryptocurrency.",
"j_scen": "Home Invasion"
},
{
"n": 14,
"sheet_row": 129,
"s_victim": "Unidentified man",
"s_date": "2022-05-01",
"s_country": "UAE",
"s_loc": "Dubai, UAE",
"s_desc": "Crypto expert assaulted & robbed by investors for losing money.",
"s_scen": "Home Invasion",
"fields": [
"article_1"
],
"chars": 2805,
"snippet": "Dubai cryptocurrency expert assaulted by investors for losing money Six people hit victim, stole his money, watches and jewellery after millions lost in trade Last updated: May 28, 2022 | 11:13 Ali Al Shouk, Senior Reporter 2 MIN READ Dubai Courts. Dubai Courts. Gulf News Archives Dubai: Six people ",
"j_id": 128,
"j_victim": "Unidentified man",
"j_date": "May 1, 2022",
"j_country": "UAE",
"j_loc": "Dubai, UAE",
"j_desc": "Six people hit victim, stole his money, watches and jewellery after crypto expert lost millions in trade.",
"j_scen": "Home Invasion"
},
{
"n": 15,
"sheet_row": 139,
"s_victim": "Unidentified couple",
"s_date": "2022-09-12",
"s_country": "USA",
"s_loc": "Delray Beach, Florida",
"s_desc": "Armed gang invades home, takes jewelry, electronics, cash. Tried but failed to drain Gemini account.",
"s_scen": "Home Invasion",
"fields": [
"article_1",
"article_2"
],
"chars": 594,
"snippet": "Records show the first kidnapping took place Sept. 12, 2022, in Delray Beach. That’s when Avila, Quintana and a man not accused in the indictment allegedly detained two victims at their home at gunpoint.",
"j_id": 138,
"j_victim": "Unidentified couple",
"j_date": "September 12, 2022",
"j_country": "USA",
"j_loc": "Delray Beach, Florida",
"j_desc": "Armed gang invades home, takes jewelry, electronics, cash. Tried but failed to drain Gemini account.",
"j_scen": "Home Invasion"
},
{
"n": 16,
"sheet_row": 144,
"s_victim": "Unidentified man",
"s_date": "2022-12-03",
"s_country": "Netherlands",
"s_loc": "Lelystad, Netherlands",
"s_desc": "Man responds to ad to sell his bitcoin, is attacked by several men & forced to transfer 30K EUR worth of BTC & ETH.",
"s_scen": "P2P Trade Gone Wrong",
"fields": [
"article_1"
],
"chars": 1406,
"snippet": "Man convicted in violent Bitcoin robbery during classified ad deal & separate shooting The Midden-Nederland court sentenced 19-year-old Ario S. to three years in prison, one of which was conditionally suspended, for a violent robbery in which he helped steal the victim’s cryptocurrencies, specifical",
"j_id": 143,
"j_victim": "Unidentified man",
"j_date": "December 3, 2022",
"j_country": "Netherlands",
"j_loc": "Lelystad, Netherlands",
"j_desc": "Man responds to ad to sell his bitcoin, is attacked by several men & forced to transfer 30K EUR worth of BTC & ETH.",
"j_scen": "P2P Trade Gone Wrong"
},
{
"n": 17,
"sheet_row": 146,
"s_victim": "Unidentified man",
"s_date": "2022-12-22",
"s_country": "USA",
"s_loc": "Little Elm, Texas",
"s_desc": "Armed gang invades home, torture victims for 3 hours, take jewelry, fail to find hardware wallet with $1.4m.",
"s_scen": "Home Invasion",
"fields": [
"article_1",
"article_2",
"article_3"
],
"chars": 3181,
"snippet": "Three suspects arrested in Texas make initial appearance in Houston federal courtroom EL PASO, Texas (Border Report) – A federal grand jury has charged 11 individuals with ties to Texas in connection with a string of kidnappings and robberies in three states. The group has been linked to nine abduct",
"j_id": 145,
"j_victim": "Unidentified man",
"j_date": "December 22, 2022",
"j_country": "USA",
"j_loc": "Little Elm, Texas",
"j_desc": "Armed gang invades home, torture victims for 3 hours, take jewelry, fail to find hardware wallet with $1.4m.",
"j_scen": "Home Invasion"
},
{
"n": 18,
"sheet_row": 170,
"s_victim": "Repeat Victim",
"s_date": "2023-11-30",
"s_country": "UK",
"s_loc": "Salford, England",
"s_desc": "Victim was kidnapped from a friend's house, had bag placed over head, rescued by police after anonymous tip sent.",
"s_scen": "Kidnapping",
"fields": [
"article_1"
],
"chars": 3055,
"snippet": "Gang who kidnapped man for cryptocurrency jailed 31 January 2025Laura O'NeillBBC News, ManchesterGreater Manchester PoliceDavid Povey and Jonathan Newns were among the gang members handed the most severe sentences Gang members who kidnapped a man and forced him to handover hundreds of thousands of p",
"j_id": 169,
"j_victim": "Repeat Victim",
"j_date": "November 30, 2023",
"j_country": "UK",
"j_loc": "Salford, England",
"j_desc": "Victim was kidnapped from a friend's house, had bag placed over head, rescued by police after anonymous tip sent.",
"j_scen": "Kidnapping"
},
{
"n": 19,
"sheet_row": 180,
"s_victim": "Undisclosed Man",
"s_date": "2024-07-10",
"s_country": "France",
"s_loc": "Angers, France",
"s_desc": "2 men invade home, threaten victim with knife & crowbar, demand 10,000 EUR.",
"s_scen": "Home Invasion",
"fields": [
"article_1"
],
"chars": 3175,
"snippet": "Three Young Men Convicted for Extorting Cryptocurrency in Angers By Julie Echard Published: September 6, 2024, at 6:25 PM Three young men were tried before the Angers Correctional Court this Friday, September 6, 2024, for extorting money from a man in Angers, Maine-et-Loire, in June and July 2024. T",
"j_id": 179,
"j_victim": "Undisclosed Man",
"j_date": "July 10, 2024",
"j_country": "France",
"j_loc": "Angers, France",
"j_desc": "2 men invade home, threaten victim with knife & crowbar, demand 10,000 EUR.",
"j_scen": "Home Invasion"
},
{
"n": 20,
"sheet_row": 188,
"s_victim": "Undisclosed",
"s_date": "2024-08-15",
"s_country": "Canada",
"s_loc": "Verdun, Quebec",
"s_desc": "3 men invade home of crypto entrepreneur, torture him for hours until he transfers $15K.",
"s_scen": "Home Invasion",
"fields": [
"article_1"
],
"chars": 1619,
"snippet": "3 men facing kidnapping, robbery and other charges in crypto theft: Montreal police By Daniel J. Rowe Updated: April 10, 2025 at 11:36AM EDT Published: April 10, 2025 at 11:24AM EDT A Montreal police (SPVM) car. (Daniel J. Rowe/CTV News) Montreal police (SPVM) said on Thursday that officers arrested",
"j_id": 187,
"j_victim": "Undisclosed",
"j_date": "August 15, 2024",
"j_country": "Canada",
"j_loc": "Verdun, Quebec",
"j_desc": "3 men invade home of crypto entrepreneur, torture him for hours until he transfers $15K.",
"j_scen": "Home Invasion"
},
{
"n": 21,
"sheet_row": 197,
"s_victim": "Undisclosed Man",
"s_date": "2024-11-22",
"s_country": "USA",
"s_loc": "Las Vegas, Nevada",
"s_desc": "Sex worker accused of kidnapping, stealing $300K in crypto from man she met at nightclub.",
"s_scen": "Malicious Invitation - SocialEng",
"fields": [
"article_1"
],
"chars": 2960,
"snippet": "Las Vegas Woman Arrested for Alleged $300K Crypto Kidnapping by Michael Juanico February 11, 2025 in CRYPTO, FEATURED, FINANCE, POLITICS Reading Time: 3 mins read 6 SHARES 97 VIEWS Share on XShare in TelegramShare on Reddit A Las Vegas sex worker was charged with kidnapping and robbing nearly $300,0",
"j_id": 196,
"j_victim": "Undisclosed Man",
"j_date": "November 22, 2024",
"j_country": "USA",
"j_loc": "Las Vegas, Nevada",
"j_desc": "Sex worker accused of kidnapping, stealing $300K in crypto from man she met at nightclub.",
"j_scen": "Malicious Invitation - SocialEng"
},
{
"n": 22,
"sheet_row": 202,
"s_victim": "Influencer's Wife",
"s_date": "2024-12-24",
"s_country": "Belgium",
"s_loc": "Brussels, Belgium",
"s_desc": "Wife of crypto influencer who bragged about wealth was kidnapped by 3 men, police chase led to car crash.",
"s_scen": "Costly Fame",
"fields": [
"article_1"
],
"chars": 1854,
"snippet": "Failed kidnap attempt victim was Bitcoin millionaire’s wife (VIDEO) The identity has been revealed of the person, who was the subject of an attempted kidnap in Brussels last Friday. The abduction led to a police chase that ended in a crash in Bruges and the arrest of suspects. The victim, who was in",
"j_id": 201,
"j_victim": "Stéphane Winkel's Wife",
"j_date": "December 24, 2024",
"j_country": "Belgium",
"j_loc": "Brussels, Belgium",
"j_desc": "Wife of crypto influencer who bragged about wealth was kidnapped by 3 men, police chase led to car crash.",
"j_scen": "Costly Fame"
},
{
"n": 23,
"sheet_row": 203,
"s_victim": "Arsalan Malik",
"s_date": "2024-12-25",
"s_country": "Pakistan",
"s_loc": "Karachi, Pakistan",
"s_desc": "Crypto trader in Karachi, Pakistan abducted by 5 men in a police van and forced to transfer $340,000 at gunpoint.",
"s_scen": "Authority Misuse",
"fields": [
"article_1"
],
"chars": 1471,
"snippet": "Crypto trader kidnapping suspect sent to prison The Newspaper's Staff Reporter Published February 14, 2025 0 Join our Whatsapp channel KARACHI: An anti-terrorism court (ATC) on Thursday remanded the prime suspect in judicial custody in a case pertaining to the kidnapping of a cryptocurrency trader w",
"j_id": 202,
"j_victim": "Mohammed Arsalan Malik",
"j_date": "December 25, 2024",
"j_country": "Pakistan",
"j_loc": "Karachi, Pakistan",
"j_desc": "Crypto trader in Karachi, Pakistan abducted by 5 men in a police van and forced to transfer $340,000 at gunpoint.",
"j_scen": "Authority Misuse"
},
{
"n": 24,
"sheet_row": 211,
"s_victim": "30 y/o man",
"s_date": "2025-01-24",
"s_country": "France",
"s_loc": "Troyes, France",
"s_desc": "Crypto miner was lured to a meeting, taken hostage, 20K EUR ransom demanded. Police rescued him & arrested 4 suspects.",
"s_scen": "Malicious Invitation - SocialEng",
"fields": [
"article_1"
],
"chars": 2242,
"snippet": "# Crypto Expert Kidnapped Near Troyes, Four Suspects Arrested A cryptocurrency specialist was kidnapped on Friday and held captive in the suburbs of Troyes before being freed by law enforcement. Four suspected kidnappers were arrested. *The thirty-year-old was heading to a professional meeting but f",
"j_id": 210,
"j_victim": "30 y/o man",
"j_date": "January 24, 2025",
"j_country": "France",
"j_loc": "Troyes, France",
"j_desc": "Crypto miner was lured to a meeting, taken hostage, 20K EUR ransom demanded. Police rescued him & arrested 4 suspects.",
"j_scen": "Malicious Invitation - SocialEng"
},
{
"n": 25,
"sheet_row": 224,
"s_victim": "Anson Que",
"s_date": "2025-03-29",
"s_country": "Philippines",
"s_loc": "Mecauayan, Bulacan, Phillipines",
"s_desc": "Businessman lured by woman to house & taken hostage. Attackers demanded $20M in cryptocurrency & received over $3M in multiple tranches. They killed the victim anyway.",
"s_scen": "Kidnapping",
"fields": [
"article_1"
],
"chars": 630,
"snippet": "Ramon Tulfo Reveals Chinese Businessman Was Killed Despite ₱160M Ransom Payment RAMON TULFO – The veteran journalist and columnist revealed through trusted sources that a Chinese businessman, recently kidnapped in Pasay City, was killed along with his driver, despite his family paying a total of ₱16",
"j_id": 223,
"j_victim": "Anson Que and his driver, Armanie Pabillo",
"j_date": "March 29, 2025",
"j_country": "Philippines",
"j_loc": "Mecauayan, Bulacan, Phillipines",
"j_desc": "Businessman lured by woman to house & taken hostage. Attackers demanded $20M in cryptocurrency & received over $3M in multiple tranches. They killed the victims anyway.",
"j_scen": "Kidnapping"
},
{
"n": 26,
"sheet_row": 226,
"s_victim": "Father of crypto millionaire",
"s_date": "2025-05-01",
"s_country": "France",
"s_loc": "Paris, France",
"s_desc": "Father of crypto millionaire abducted in broad daylight, 5M EUR ransom demanded, finger severed before being rescued by police.",
"s_scen": "Kidnapping",
"fields": [
"article_1"
],
"chars": 2071,
"snippet": "The father of an entrepreneur in cryptocurrencies kidnapped in Paris and found kidnapped, his finger severed The victim, a French fiftieth-year-old, was abducted Thursday in Paris and released Saturday in Palaiseau (Essonne) after a police operation. Four suspects were arrested and taken into custod",
"j_id": 322,
"j_victim": "Father of a crypto millionaire",
"j_date": "May 1, 2025",
"j_country": "France",
"j_loc": "Paris, France",
"j_desc": "Father of crypto millionaire abducted in broad daylight, 5M EUR ransom demanded, finger severed before being rescued by police.",
"j_scen": "Kidnapping"
},
{
"n": 27,
"sheet_row": 227,
"s_victim": "crypto guy",
"s_date": "2025-05-01",
"s_country": "USA",
"s_loc": "Las Vegas, Nevada",
"s_desc": "Florida teens kidnap Las Vegas man, drive him to Arizona desert, steal $4M in cryptocurrency: police",
"s_scen": "Kidnapping",
"fields": [
"article_1"
],
"chars": 3894,
"snippet": "Florida teens kidnap Las Vegas man, drive him to Arizona desert, steal $4M in cryptocurrency: police by: David Charns Posted: May 9, 2025 / 01:09 PM PDT Updated: May 9, 2025 / 06:33 PM PDT 2 in custody, 1 on the run, prosecutors say SHARE LAS VEGAS (KLAS) — Three teenagers are accused of kidnapping ",
"j_id": 323,
"j_victim": "Crypto investor",
"j_date": "May 1, 2025",
"j_country": "USA",
"j_loc": "Las Vegas, Nevada",
"j_desc": "Florida teens kidnap Las Vegas man, drive him to Arizona desert, steal $4M in cryptocurrency",
"j_scen": "Kidnapping"
},
{
"n": 28,
"sheet_row": 247,
"s_victim": "30 y/o man",
"s_date": "2025-08-02",
"s_country": "Philippines",
"s_loc": "Parañaque City, Philippines",
"s_desc": "4 Chinese nationals kidnapped a man seeking money transfer services. Victim was handcuffed, threatened with a firearm, physically harmed, and forced to transfer $50,000.",
"s_scen": "P2P Trade Gone Wrong",
"fields": [
"article_1"
],
"chars": 1843,
"snippet": "Chinese national kidnapped at Parañaque resort FOUR Chinese nationals arrested for allegedly kidnapping a fellow Chinese national.Philippine National Police Kimberly Anne Ojeda Published on: 04 Aug 2025, 08:20 Philippine National Police (PNP) chief Nicolas Torre III on Monday confirmed a kidnapping ",
"j_id": 246,
"j_victim": "30 y/o man",
"j_date": "August 2, 2025",
"j_country": "Philippines",
"j_loc": "Parañaque City, Philippines",
"j_desc": "4 Chinese nationals kidnapped a man seeking money transfer services. Victim was handcuffed, threatened with a firearm, physically harmed, and forced to transfer $50,000.",
"j_scen": "P2P Trade Gone Wrong"
},
{
"n": 29,
"sheet_row": 248,
"s_victim": "Unidentified man",
"s_date": "2025-08-05",
"s_country": "France",
"s_loc": "Paris, France",
"s_desc": "5 men threatened, kidnapped, and beat a crypto industry worker before stealing 2M euros in bitcoin from him. The attackers were quickly captured by police.",
"s_scen": "Kidnapping",
"fields": [
"article_1"
],
"chars": 1720,
"snippet": "Paris: Cryptocurrency Professional Assaulted in Luxury Hotel By Julien Constant August 6, 2025, 4:17 PM Five men are suspected of assaulting a cryptocurrency professional and seizing a device containing 2 million euros in Bitcoin. Illustration LP/Arnaud Journois Another criminal case involving crypt",
"j_id": 247,
"j_victim": "Unidentified man",
"j_date": "August 5, 2025",
"j_country": "France",
"j_loc": "Paris, France",
"j_desc": "5 men threatened, kidnapped, and beat a crypto industry worker before stealing 2M euros in bitcoin from him. The attackers were quickly captured by police.",
"j_scen": "Kidnapping"
},
{
"n": 30,
"sheet_row": 256,
"s_victim": "Family",
"s_date": "2025-09-19",
"s_country": "USA",
"s_loc": "Grant, Minnesota, United States",
"s_desc": "Two brothers from Texas held a MN family hostage at gunpoint for nine hours, forced the father to drive 3 hours to the family cabin to transfer $36,000 in crypto. Son called 911 and attackers were caught.",
"s_scen": "Home Invasion",
"fields": [
"article_1"
],
"chars": 4969,
"snippet": "Texas brothers charged after allegedly holding Minnesota family hostage, stealing $8M in crypto Raymond Christian Garcia, 23, and Isiah Angelo Garcia, 24, were taken into custody in Texas and face federal and state charges in connection with the Sept. 19 attack. Sept. 26, 2025, 1:20 PM GMT-3 / Updat",
"j_id": 255,
"j_victim": "Family",
"j_date": "September 19, 2025",
"j_country": "USA",
"j_loc": "Grant, Minnesota, United States",
"j_desc": "Two brothers from Texas held a MN family hostage at gunpoint for nine hours, forced the father to drive 3 hours to the family cabin to transfer $36,000 in crypto. Son called 911 and attackers were caught.",
"j_scen": "Home Invasion"
}
]
merge-output/reconcile_sources.py
+73
View File
@@ -0,0 +1,73 @@
"""
Source-coverage reconciliation. One pass over the whole dataset.
For every DB case, decide whether it still holds a usable article:
- a fetched block with a text-bearing verdict (KEEP / PARTIAL / UNTRIMMED), or
- a phase-1 spreadsheet article (from the build manifest).
A case with neither is a genuine gap: every fetched block is non-text
(THIN / BLOCKED / DEAD / NOT AN ARTICLE / SYNDICATION / OFF-CASE) or it has no
sources at all.
Then reconcile against sofia-worklist.md in both directions:
- every gap must be named on the worklist (report the ones that are missing),
- anything named on the worklist that now HAS a usable source can come off.
Mechanical only; prints a report and exits 0. Nothing is modified.
"""
import io
import json
import re
import sys
from pathlib import Path
sys.stdout = io.TextIOWrapper(sys.stdout.buffer, encoding="utf-8", errors="replace")
BASE = Path(__file__).resolve().parent
TEXT_VERDICTS = {"KEEP", "PARTIAL", "UNTRIMMED"}
def main():
recs = json.loads((BASE.parent / "attacks-export-Gart-website.json").read_text(encoding="utf-8"))
ids = {r["id"] for r in recs}
victim = {r["id"]: r.get("victim") for r in recs}
store = json.loads((BASE / "sourced-articles.json").read_text(encoding="utf-8"))
manifest = json.loads((BASE / "case-files-manifest.json").read_text(encoding="utf-8"))
# fetched coverage: any text-bearing block
fetched_text = {int(cid) for cid, blocks in store.items()
if any(b.get("verdict") in TEXT_VERDICTS for b in blocks)}
# sheet coverage: any phase-1 article filed by the build
sheet = {m["case"] for m in manifest["entries"] if "reported_K&R sheet" in m.get("origin", "")}
covered = fetched_text | sheet
gaps = sorted(ids - covered)
# what each non-covered case does still carry, for the report
def why(cid):
blocks = store.get(str(cid), [])
if not blocks:
return "no fetched sources and no spreadsheet article"
return "only non-text blocks: " + ", ".join(
f"{b.get('field')}={b.get('verdict')}" for b in blocks)
# worklist reconciliation
wl_path = BASE / "sofia-worklist.md"
wl = wl_path.read_text(encoding="utf-8") if wl_path.exists() else ""
wl_ids = {int(n) for n in re.findall(r"\b(?:case\s+)?(\d{2,3})\b", wl)} & ids
print(f"{len(ids)} DB cases | {len(covered)} covered "
f"({len(fetched_text)} fetched-text, {len(sheet)} sheet) | {len(gaps)} gaps\n")
print("GENUINE GAPS (no usable source anywhere):")
for cid in gaps:
on = "on worklist" if cid in wl_ids else ">>> NOT ON WORKLIST — ADD"
print(f" {cid:>3} {str(victim[cid])[:34]:34} {on}")
print(f" {why(cid)}")
stale = sorted(c for c in wl_ids if c in covered)
print(f"\nWORKLIST ENTRIES THAT NOW HAVE A SOURCE (candidates to remove): "
f"{stale if stale else 'none'}")
print(" (a worklist mention can be context rather than a gap claim — confirm before removing)")
if __name__ == "__main__":
main()
merge-output/review-16.json
+431
View File
@@ -0,0 +1,431 @@
[
{
"sheet_row": 18,
"s_victim": "Multiple",
"s_date": "October, 2017",
"s_country": "France",
"s_loc": "Toulouse, France",
"s_desc": "4 bitcoin traders robbed at gunpoint",
"chars": 1317,
"j_id": 266,
"j_victim": "Multiple",
"j_date": "October ?, 2017",
"j_loc": "Toulouse, France",
"j_desc": "4 bitcoin traders robbed at gunpoint",
"flags": [
"desc+country rule",
"id offset 248"
],
"rule": "desc+country"
},
{
"sheet_row": 19,
"s_victim": "Multiple",
"s_date": "October, 2017",
"s_country": "USA",
"s_loc": "Los Angeles, California",
"s_desc": "\"Discount Bitcoin Bandits\" committed 5 robberies at gunpoint",
"chars": 3890,
"j_id": 18,
"j_victim": "Multiple victims",
"j_date": "October, 2017",
"j_loc": "Los Angeles, California",
"j_desc": "\"Discount Bitcoin Bandits\" committed 5 robberies at gunpoint",
"flags": [
"desc+country rule",
"victim differs"
],
"rule": "desc+country"
},
{
"sheet_row": 22,
"s_victim": "Unidentified",
"s_date": "December, 2017",
"s_country": "Iceland",
"s_loc": "Reykjavik, Iceland",
"s_desc": "600 Bitcoin ASICs stolen and Follow-up Story",
"chars": 19524,
"j_id": 21,
"j_victim": "Unidentified",
"j_date": "December, 2017",
"j_loc": "Reykjavik, Iceland",
"j_desc": "600 Bitcoin ASICs stolen and Follow-up Story",
"flags": [
"desc+country rule"
],
"rule": "desc+country"
},
{
"sheet_row": 32,
"s_victim": "Unidentified",
"s_date": "January 2018",
"s_country": "Ukraine",
"s_loc": "Odessa, Ukraine",
"s_desc": "Several men pose as bitcoin sellers, beat and rob buyer of 1.5 Million UAH ($57,000 USD",
"chars": 1495,
"j_id": 270,
"j_victim": "Unidentified",
"j_date": "January ?, 2018",
"j_loc": "Odessa, Ukraine",
"j_desc": "Several men pose as bitcoin sellers, beat and rob buyer of 1.5 Million UAH ($57,000 USD",
"flags": [
"desc+country rule",
"id offset 238"
],
"rule": "desc+country"
},
{
"n": 4,
"sheet_row": 33,
"s_victim": "Sailesh Bhatt",
"s_date": "2018-02-09",
"s_country": "India",
"s_loc": "Amreli, India",
"s_desc": "Police Officers Beat, Extorted 200 BTC from Businessman",
"s_scen": "Authority Misuse",
"fields": [
"article_1",
"article_2",
"article_3"
],
"chars": 8602,
"snippet": "Gujarat cops kidnap Surat builder, extort Bitcoins worth Rs 13 crore Ten Gujarat cops allegedly kidnapped and extorted 200 Bitcoins worth Rs 13 crore from a Surat-based builder and businessman, making it possibly the first case of kidnapping involving cryptocurrency. advertisement In possibly the fi",
"j_id": 32,
"j_victim": "Shailesh Bhatt",
"j_date": "February 9, 2018",
"j_country": "India",
"j_loc": "Amreli, India",
"j_desc": "Police Officers Beat, Extorted 200 BTC from Businessman",
"j_scen": "Authority Misuse",
"flags": [
"victim differs"
],
"rule": "date+country"
},
{
"sheet_row": 92,
"s_victim": "Unidentified man",
"s_date": "July, 2021",
"s_country": "Russia",
"s_loc": "Omsk, Russia",
"s_desc": "3 men kidnap and extort over $1M in crypto from victim",
"chars": 1441,
"j_id": 91,
"j_victim": "Unidentified man",
"j_date": "July, 2021",
"j_loc": "Omsk, Russia",
"j_desc": "3 men kidnap and extort over $1M in crypto from victim",
"flags": [
"desc+country rule"
],
"rule": "desc+country"
},
{
"sheet_row": 112,
"s_victim": "Shahid Naseer",
"s_date": "None",
"s_country": "Pakistan",
"s_loc": null,
"s_desc": "Police Involved in Plot to Extort Over 60 BTC",
"chars": 2947,
"j_id": 111,
"j_victim": "Shahid Naseer",
"j_date": "March 19, 2019",
"j_loc": null,
"j_desc": "Police Involved in Plot to Extort Over 60 BTC",
"flags": [
"desc+country rule"
],
"rule": "desc+country"
},
{
"n": 14,
"sheet_row": 129,
"s_victim": "Unidentified man",
"s_date": "2022-05-01",
"s_country": "UAE",
"s_loc": "Dubai, UAE",
"s_desc": "Crypto expert assaulted & robbed by investors for losing money.",
"s_scen": "Home Invasion",
"fields": [
"article_1"
],
"chars": 2805,
"snippet": "Dubai cryptocurrency expert assaulted by investors for losing money Six people hit victim, stole his money, watches and jewellery after millions lost in trade Last updated: May 28, 2022 | 11:13 Ali Al Shouk, Senior Reporter 2 MIN READ Dubai Courts. Dubai Courts. Gulf News Archives Dubai: Six people ",
"j_id": 128,
"j_victim": "Unidentified man",
"j_date": "May 1, 2022",
"j_country": "UAE",
"j_loc": "Dubai, UAE",
"j_desc": "Six people hit victim, stole his money, watches and jewellery after crypto expert lost millions in trade.",
"j_scen": "Home Invasion",
"flags": [
"desc edited"
],
"rule": "date+country"
},
{
"sheet_row": 163,
"s_victim": "Repeat Victim",
"s_date": "October, 2023",
"s_country": "UK",
"s_loc": "Cardishead, England",
"s_desc": "Victim dragged into a flat, tied up, assaulted, locked in a cupboard all night until they received cryptocurrency.",
"chars": 407,
"j_id": 162,
"j_victim": "Repeat Victim",
"j_date": "October, 2023",
"j_loc": "Cardishead, England",
"j_desc": "Victim dragged into a flat, tied up, assaulted, locked in a cupboard all night until they received cryptocurrency.",
"flags": [
"desc+country rule"
],
"rule": "desc+country"
},
{
"n": 22,
"sheet_row": 202,
"s_victim": "Influencer's Wife",
"s_date": "2024-12-24",
"s_country": "Belgium",
"s_loc": "Brussels, Belgium",
"s_desc": "Wife of crypto influencer who bragged about wealth was kidnapped by 3 men, police chase led to car crash.",
"s_scen": "Costly Fame",
"fields": [
"article_1"
],
"chars": 1854,
"snippet": "Failed kidnap attempt victim was Bitcoin millionaire’s wife (VIDEO) The identity has been revealed of the person, who was the subject of an attempted kidnap in Brussels last Friday. The abduction led to a police chase that ended in a crash in Bruges and the arrest of suspects. The victim, who was in",
"j_id": 201,
"j_victim": "Stéphane Winkel's Wife",
"j_date": "December 24, 2024",
"j_country": "Belgium",
"j_loc": "Brussels, Belgium",
"j_desc": "Wife of crypto influencer who bragged about wealth was kidnapped by 3 men, police chase led to car crash.",
"j_scen": "Costly Fame",
"flags": [
"victim differs"
],
"rule": "date+country"
},
{
"n": 23,
"sheet_row": 203,
"s_victim": "Arsalan Malik",
"s_date": "2024-12-25",
"s_country": "Pakistan",
"s_loc": "Karachi, Pakistan",
"s_desc": "Crypto trader in Karachi, Pakistan abducted by 5 men in a police van and forced to transfer $340,000 at gunpoint.",
"s_scen": "Authority Misuse",
"fields": [
"article_1"
],
"chars": 1471,
"snippet": "Crypto trader kidnapping suspect sent to prison The Newspaper's Staff Reporter Published February 14, 2025 0 Join our Whatsapp channel KARACHI: An anti-terrorism court (ATC) on Thursday remanded the prime suspect in judicial custody in a case pertaining to the kidnapping of a cryptocurrency trader w",
"j_id": 202,
"j_victim": "Mohammed Arsalan Malik",
"j_date": "December 25, 2024",
"j_country": "Pakistan",
"j_loc": "Karachi, Pakistan",
"j_desc": "Crypto trader in Karachi, Pakistan abducted by 5 men in a police van and forced to transfer $340,000 at gunpoint.",
"j_scen": "Authority Misuse",
"flags": [
"victim differs"
],
"rule": "date+country"
},
{
"sheet_row": 213,
"s_victim": "Unidentified man",
"s_date": "February, 2025",
"s_country": "Nigeria",
"s_loc": "Okota, Lagos",
"s_desc": "Woman conspires with brother & gang to rob her boyfriend of 3 iPhones and $10K USD of bitcoin.",
"chars": 2178,
"j_id": 212,
"j_victim": "Unidentified man",
"j_date": "February ?, 2025",
"j_loc": "Okota, Lagos",
"j_desc": "Woman conspires with brother & gang to rob her boyfriend of 3 iPhones and $10K USD of bitcoin.",
"flags": [
"desc+country rule"
],
"rule": "desc+country"
},
{
"sheet_row": 218,
"s_victim": "30 y/o man",
"s_date": "None",
"s_country": "Sweden",
"s_loc": "N/A",
"s_desc": "Victim kidnapped by gang who took him into the woods, kicked and punched him, poured gasoline over him, threatened to set him on fire, placed pliers to his hand, and threatened to cut off his fingers.",
"chars": 396,
"j_id": 217,
"j_victim": "30 y/o man",
"j_date": "March ?, 2025",
"j_loc": null,
"j_desc": "Victim kidnapped by gang who took him into the woods, kicked and punched him, poured gasoline over him, threatened to set him on fire, placed pliers to his hand, and threatened to cut off his fingers.",
"flags": [
"desc+country rule"
],
"rule": "desc+country"
},
{
"sheet_row": 221,
"s_victim": "Retired teacher",
"s_date": "None",
"s_country": "Brazil",
"s_loc": "Recife",
"s_desc": "Crypto manager surveilled, mother kidnapped, ransomed for 5 BTC. 4 people were later arrested.",
"chars": 3182,
"j_id": 321,
"j_victim": "Crypto manager",
"j_date": "March 21, 2025",
"j_loc": "Recife",
"j_desc": "Crypto manager surveilled, mother kidnapped, ransomed for 5 BTC. 4 people were later arrested.",
"flags": [
"desc+country rule",
"victim differs",
"id offset 100"
],
"rule": "desc+country"
},
{
"n": 25,
"sheet_row": 224,
"s_victim": "Anson Que",
"s_date": "2025-03-29",
"s_country": "Philippines",
"s_loc": "Mecauayan, Bulacan, Phillipines",
"s_desc": "Businessman lured by woman to house & taken hostage. Attackers demanded $20M in cryptocurrency & received over $3M in multiple tranches. They killed the victim anyway.",
"s_scen": "Kidnapping",
"fields": [
"article_1"
],
"chars": 630,
"snippet": "Ramon Tulfo Reveals Chinese Businessman Was Killed Despite ₱160M Ransom Payment RAMON TULFO – The veteran journalist and columnist revealed through trusted sources that a Chinese businessman, recently kidnapped in Pasay City, was killed along with his driver, despite his family paying a total of ₱16",
"j_id": 223,
"j_victim": "Anson Que and his driver, Armanie Pabillo",
"j_date": "March 29, 2025",
"j_country": "Philippines",
"j_loc": "Mecauayan, Bulacan, Phillipines",
"j_desc": "Businessman lured by woman to house & taken hostage. Attackers demanded $20M in cryptocurrency & received over $3M in multiple tranches. They killed the victims anyway.",
"j_scen": "Kidnapping",
"flags": [
"desc edited",
"victim differs"
],
"rule": "date+country"
},
{
"n": 26,
"sheet_row": 226,
"s_victim": "Father of crypto millionaire",
"s_date": "2025-05-01",
"s_country": "France",
"s_loc": "Paris, France",
"s_desc": "Father of crypto millionaire abducted in broad daylight, 5M EUR ransom demanded, finger severed before being rescued by police.",
"s_scen": "Kidnapping",
"fields": [
"article_1"
],
"chars": 2071,
"snippet": "The father of an entrepreneur in cryptocurrencies kidnapped in Paris and found kidnapped, his finger severed The victim, a French fiftieth-year-old, was abducted Thursday in Paris and released Saturday in Palaiseau (Essonne) after a police operation. Four suspects were arrested and taken into custod",
"j_id": 322,
"j_victim": "Father of a crypto millionaire",
"j_date": "May 1, 2025",
"j_country": "France",
"j_loc": "Paris, France",
"j_desc": "Father of crypto millionaire abducted in broad daylight, 5M EUR ransom demanded, finger severed before being rescued by police.",
"j_scen": "Kidnapping",
"flags": [
"victim differs",
"id offset 96"
],
"rule": "date+country"
},
{
"n": 27,
"sheet_row": 227,
"s_victim": "crypto guy",
"s_date": "2025-05-01",
"s_country": "USA",
"s_loc": "Las Vegas, Nevada",
"s_desc": "Florida teens kidnap Las Vegas man, drive him to Arizona desert, steal $4M in cryptocurrency: police",
"s_scen": "Kidnapping",
"fields": [
"article_1"
],
"chars": 3894,
"snippet": "Florida teens kidnap Las Vegas man, drive him to Arizona desert, steal $4M in cryptocurrency: police by: David Charns Posted: May 9, 2025 / 01:09 PM PDT Updated: May 9, 2025 / 06:33 PM PDT 2 in custody, 1 on the run, prosecutors say SHARE LAS VEGAS (KLAS) — Three teenagers are accused of kidnapping ",
"j_id": 323,
"j_victim": "Crypto investor",
"j_date": "May 1, 2025",
"j_country": "USA",
"j_loc": "Las Vegas, Nevada",
"j_desc": "Florida teens kidnap Las Vegas man, drive him to Arizona desert, steal $4M in cryptocurrency",
"j_scen": "Kidnapping",
"flags": [
"desc edited",
"victim differs",
"id offset 96"
],
"rule": "date+country"
},
{
"sheet_row": 235,
"s_victim": "Unidentified man",
"s_date": "None",
"s_country": "South Korea",
"s_loc": "Seoul",
"s_desc": "Russian nationals lure victim to hotel for crypto trade, attempt to rob him of 1 billion won, but victim escaped.",
"chars": 3215,
"j_id": 234,
"j_victim": "Unidentified man",
"j_date": "May 21, 2025",
"j_loc": "Seoul",
"j_desc": "Russian nationals lure victim to hotel for crypto trade, attempt to rob him of 1 billion won, but victim escaped.",
"flags": [
"desc+country rule"
],
"rule": "desc+country"
},
{
"sheet_row": 240,
"s_victim": "unknown",
"s_date": "None",
"s_country": "Brazil",
"s_loc": "Goiânia",
"s_desc": "Victim tricked into attending a business meeting that ended up being a wrench attack trap. Attack failed, 2 attackers were killed by police, mastermind was caught fleeing to Miami.",
"chars": 6527,
"j_id": 334,
"j_victim": "unknown",
"j_date": "June 24, 2025",
"j_loc": "Goiânia",
"j_desc": "Victim tricked into attending a business meeting that ended up being a wrench attack trap. Attack failed, 2 attackers were killed by police, mastermind was caught fleeing to Miami.",
"flags": [
"desc+country rule",
"id offset 94"
],
"rule": "desc+country"
},
{
"sheet_row": 259,
"s_victim": "Family",
"s_date": "None",
"s_country": "France",
"s_loc": "Val-de-Marne",
"s_desc": "A woman and her two \nchildren were threatened by two masked individuals in order to blackmail\n her husband, who is a crypto investor.",
"chars": 1268,
"j_id": 362,
"j_victim": "Family",
"j_date": "October 1, 2025",
"j_loc": "Val-de-Marne, France",
"j_desc": "A woman and her two children were threatened by two masked individuals in order to blackmail her husband, who is a crypto investor.",
"flags": [
"desc+country rule",
"id offset 103"
],
"rule": "desc+country"
}
]
merge-output/sheet-trim-decisions.json
+46
View File
@@ -0,0 +1,46 @@
{
"32:Articles": {"drop": [2]},
"32:Article 2": {"drop": [14, 15, 16, 17]},
"38:Articles": {"drop": [1, 4]},
"38:Article 2": {"keep": [0, 1, 3, 4, 5, 6, 7, 16, 17, 18, 19, 27, 28, 29]},
"60:Articles": {"drop": [15]},
"69:Articles": {"drop": [0, 4, 5, 6, 29, 30]},
"80:Articles": {"drop": [7, 11]},
"86:Article 2": {"drop": [2, 3, 14]},
"99:Articles": {"drop": [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 12, 13, 15, 16, 25, 26, 27, 28, 29, 34, 35, 39, 40, 41, 42, 43]},
"105:Articles": {"drop": [3]},
"111:Articles": {"drop": [1, 3]},
"123:Articles": {"keep": [0, 18, 20, 22, 24, 26, 56, 58, 60, 62, 80, 82, 84, 86, 88, 90, 92, 112, 114, 116, 118, 120, 122, 124, 126, 146, 148, 150, 152, 154, 156, 158, 160, 174, 176, 178, 180]},
"137:Articles": {"drop": [2, 3, 4, 5, 6, 7, 8, 9, 24, 25, 26, 27]},
"141:Articles": {"drop": [23, 24, 31, 32]},
"166:Articles": {"keep": [0, 1, 12, 13, 18, 28, 30, 31, 33, 34, 35, 36, 37, 38]},
"174:Articles": {"drop": [2, 3, 4, 5]},
"180:Articles": {"drop": [2]},
"189:Articles": {"keep": [0, 1, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 35, 36, 37, 38]},
"193:Articles": {"keep": [0, 1, 5, 6, 7, 8, 9, 10, 11, 13, 14, 15, 16, 17, 18, 19, 20, 23, 24, 25, 26, 27, 28]},
"193:Article 3": {"drop": [8, 9, 10, 17, 18, 19, 20, 21]},
"194:Articles": {"keep": [0, 4, 5, 6, 8, 9, 11, 12, 13, 14, 15, 16, 17]},
"195:Articles": {"drop": [2, 3, 7, 8, 9, 10, 18, 19, 20, 21, 22, 23, 25, 26, 27, 28, 34, 35, 36, 37, 38, 40, 41, 42, 43, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75]},
"204:Articles": {"keep": [0, 7, 9, 13, 15, 21, 23, 26, 27]},
"207:Articles": {"drop": [1, 2, 3, 4, 5, 6, 9]},
"212:Articles": {"keep": [0, 2, 3, 4, 5, 6, 7, 8, 9, 10, 21, 25, 26, 27, 28, 29, 30, 31]},
"216:Articles": {"drop": [1, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54]},
"218:Articles": {"drop": [1, 3, 5, 6, 7, 10, 12, 14]},
"229:Articles": {"keep": [0, 1, 21, 22, 141, 146, 147, 148, 149, 152, 153, 154, 155, 156, 157, 159, 160, 161, 162, 163, 166, 167, 168, 169, 290, 291, 292, 293, 294, 297, 298, 299, 300, 303, 304, 305, 306, 307]},
"231:Articles": {"keep": [0, 1, 20, 22, 24, 26, 28, 30, 32, 34]},
"232:Articles": {"keep": [0, 1, 17, 18, 19, 20, 25, 27, 35, 36, 37, 38, 39, 40, 41, 42, 43, 52, 53, 54, 63, 64, 65]},
"233:Articles": {"keep": [0, 11, 13, 15, 17, 18, 21]},
"234:Articles": {"drop": [2, 3, 4, 6, 7, 8, 9, 10, 11, 16, 20, 21, 23, 26, 29, 31, 32]},
"235:Article 2": {"drop": [1, 3, 4, 5, 7, 8, 9, 10, 11, 13, 14, 26, 27]},
"241:Articles": {"drop": [3, 9, 10, 11]},
"246:Articles": {"drop": [23, 25, 27, 28, 29, 30, 31, 32]},
"254:Articles": {"drop": [8, 9, 10, 11, 15, 16, 17, 18]},
"263:Articles": {"drop": [1, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12]},
"279:Articles": {"drop": [5]},
"293:Articles": {"drop": [7]},
"297:Articles": {"drop": [10]},
"299:Articles": {"drop": [6, 15, 16, 17, 52, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73]},
"303:Articles": {"drop": [3, 4, 5, 6, 7, 8, 9, 10, 11, 12]},
"323:Articles": {"keep": [0, 7, 10, 12, 14, 16, 19, 21, 23, 25, 31, 33, 35, 37, 41, 43]},
"386:Articles": {"drop": [1, 14]}
}
merge-output/sheet_furniture.py
+91
View File
@@ -0,0 +1,91 @@
"""
Propose furniture lines to drop from phase-1 spreadsheet articles.
The sheet articles were copied in verbatim and never trimmed. A subset carries site
furniture (interior ad markers, share buttons, newsletter/subscribe blocks, related-article
teasers, copyright footers). This proposes ONLY high-confidence furniture lines, from the
exact cell text, for human review. Nothing is invented: every proposed drop is a real line
from the cell, quoted in full.
Canonical split is cell.split("\\n") over ALL lines (blanks included) so drop indices line up
exactly with what the trimmer/build will use. Output -> staging/sheet-cuts.json.
"""
import io
import json
import re
import sys
from pathlib import Path
import openpyxl
sys.stdout = io.TextIOWrapper(sys.stdout.buffer, encoding="utf-8", errors="replace")
BASE = Path(__file__).resolve().parent
XLSX = BASE.parent / "KR-reports_analysis_Sofi.xlsx"
# Standalone-furniture patterns. A line is furniture only if the token is essentially the
# whole line (short line), or it is an unambiguous block marker. Body lines that merely
# mention "Telegram"/"WhatsApp" in a sentence are NOT dropped (length guard handles them).
STRONG = re.compile(r"^\s*("
r"advertisement|skip advertisement|sponsored|"
r"you may (also )?like|related articles?|more from|"
r"read more|read next|next article|previous article|"
r"follow us|share this|share on|sign up|subscribe|"
r"most read|trending|recommended|"
r"©|copyright|all rights reserved|terms of service|privacy policy"
r")\b", re.I)
SHARE = re.compile(r"^\s*(whatsapp|telegram|facebook|twitter|x\b|linkedin|share)"
r"[\s|/,·-]*(whatsapp|telegram|facebook|twitter|linkedin|email|share|copy)?\s*$", re.I)
NEWS = re.compile(r"(newsletter|sign[- ]up for|subscribe to our|get the latest|"
r"delivered (to your inbox|free)|enter your email)", re.I)
def is_furniture(line):
s = line.strip()
if not s:
return None
if STRONG.search(s) and len(s) < 90:
return "marker"
if SHARE.match(s) and len(s) < 60:
return "share"
if NEWS.search(s) and len(s) < 120:
return "newsletter"
return None
def main():
cases = [int(a) for a in sys.argv[1:]]
wb = openpyxl.load_workbook(XLSX, data_only=True, read_only=True)
rows = list(wb["reported_K&R"].iter_rows(values_only=True))
idx = {h: i for i, h in enumerate(rows[0]) if h is not None}
# map case -> (row, col) via the build manifest origins
man = json.loads((BASE / "case-files-manifest.json").read_text(encoding="utf-8"))
locs = {}
for m in man["entries"]:
o = m.get("origin", "")
if "reported_K&R sheet" in o:
rn = int(re.search(r"row (\d+)", o).group(1))
col = re.search(r'column "([^"]+)"', o).group(1)
locs.setdefault(m["case"], []).append((rn, col))
out = {}
for cid in cases:
for rn, col in locs.get(cid, []):
cell = str(rows[rn - 1][idx[col]])
lines = cell.split("\n")
drops = [(i, is_furniture(l), l) for i, l in enumerate(lines) if is_furniture(l)]
key = f"{cid}:{col}"
print(f"\n### {key} (row {rn}, {len(lines)} lines) — {len(drops)} proposed drops")
for i, kind, l in drops:
ctx = " ".join(lines[i].split())[:100]
out.setdefault(key, {"row": rn, "col": col, "drop": []})
out[key]["drop"].append(i)
print(f" drop [{i}] ({kind}): {ctx}")
(BASE / "staging" / "sheet-cuts.json").write_text(
json.dumps(out, ensure_ascii=False, indent=2), encoding="utf-8")
print(f"\nwrote {sum(len(v['drop']) for v in out.values())} proposed drops "
f"across {len(out)} articles -> staging/sheet-cuts.json")
if __name__ == "__main__":
main()
merge-output/sofia-worklist.md
+243
View File
@@ -0,0 +1,243 @@
# Sofia — manual source worklist
Every source the automated pipeline could not retrieve. Open each in your browser,
copy the article text, and paste it back to me **with the case number**. I file it verbatim.
Ordered by urgency: the cases at the top have NO other working source — losing them means
the case has zero evidence. Cases lower down already have other articles on file, so their
missing source is a nice-to-have, not a gap.
Verdict meaning: DEAD = link 404/gone (try the Wayback Machine). THIN = the page needs a
browser to render (JavaScript). BLOCKED = the site refused an automated request but will
open normally for you.
## NO OTHER SOURCE — priority
- **case 390** `DEAD` · January 10, 2026 · 60 y/o female physician · Belgium
<https://www.gva.be/regio/antwerpen/regio-antwerpen/zoersel/gangsters-zoeken-naar-cryptomunten-en-binden-bewoonster-60-vast-in-zoersel-virtuele-munten-steeds-vaker-beoogde-buit/122929883.html>
- **case 390** `DEAD` · January 10, 2026 · 60 y/o female physician · Belgium
<https://www.gva.be/regio/vrouw-60-slachtoffer-van-home-invasion-in-zoersel-antwerps-parket-start-gerechtelijk-onderzoek-naar-onbekende-daders/122895454.html>
- **case 382** `DEAD` · December 13, 2025 · Yu (46, male proprietor) and Lee (37, his wife) · Hong Kong
<https://www.mexc.co/es/news/269096>
- **case 426** `THIN` · March 28, 2026 · Man in 50s · France
<https://www.surfcoastnews.com.au/finance/76504/>
- **case 395** `ERROR` · December 12, 2025 · 17- year old · France
<https://www.nicematin.com/faits-divers/cryptomonnaie-un-lyceen-toulonnais-sequestre-sa-famille-menacee-10665698>
- **case 382** `THIN` · December 13, 2025 · Yu (46, male proprietor) and Lee (37, his wife) · Hong Kong
<https://www.binance.com/en/square/post/12-14-2025-attempted-robbery-at-hong-kong-cryptocurrency-exchange-investigated-33680910939473>
- **case 369** `THIN` · May 5, 2024 · Quentin Cepeljac · UK
<https://www.thetimes.com/uk/crime/article/gang-kidnapped-barber-they-mistook-for-crypto-billionaire-n0hgdshvm>
- **case 365** `THIN` · November ?, 2024 · Unidentified man · USA
<https://www.msn.com/en-us/news/crime/florida-teens-kidnap-las-vegas-man-drive-him-to-arizona-desert-steal-4m-in-cryptocurrency-police/ar-AA1EvkGd>
- **case 45** `THIN` · July 6, 2018 · Austin Nedved · USA
<https://www.justice.gov/usao-ma/pr/northborough-man-pleads-guilty-aiding-romance-and-lottery-schemes-targeting-elderly>
- **case 430** `BLOCKED` · September 15, 2022 · Unidentified man · USA
<https://fox5sandiego.com/news/border-report/group-linked-to-9-kidnappings-in-three-states/>
- **case 426** `BLOCKED` · March 28, 2026 · Man in 50s · France
<https://www.leparisien.fr/faits-divers/boulogne-les-agresseurs-ciblent-jeune-investisseur-en-crypto-se-trompent-dadresse-et-finissent-en-garde-a-vue-07-04-2026-WESX3VDQLNALFLW4UUQRVMVXHU.php>
- **case 388** `BLOCKED` · January 10, 2026 · Father (director of cryptocurrency investment group), wife, and two children · France
<https://www.leparisien.fr/yvelines-78/un-investisseur-en-cryptomonnaies-et-sa-famille-ligotes-et-tabasses-chez-eux-dans-les-yvelines-11-01-2026-ZMJMDGSKBRBAJC5DODWC2AHHJU.php>
- **case 382** `BLOCKED` · December 13, 2025 · Yu (46, male proprietor) and Lee (37, his wife) · Hong Kong
<https://www.dimsumdaily.hk/attempted-armed-robbery-at-mong-kok-crypto-exchange-owner-injured-but-no-losses/>
- **case 382** `BLOCKED` · December 13, 2025 · Yu (46, male proprietor) and Lee (37, his wife) · Hong Kong
<https://en.coinotag.com/breakingnews/hong-kong-mong-kok-cryptocurrency-exchange-robbery-attempt-leaves-owner-injured-police-seek-three-suspects>
- **case 381** `BLOCKED` · December 18, 2025 · Cryptocurrency holder and family · France
<https://www.leparisien.fr/faits-divers/un-investisseur-en-cryptomonnaie-et-sa-compagne-sequestres-a-leur-domicile-de-la-rochelle-des-virements-effectues-par-les-ravisseurs-18-12-2025-KN6YFKOQ2NCCPEGXLZP2ZTYX4A.php>
- **case 372** `BLOCKED` · November 1, 2022 · Female "A.T." · Canada
<https://www.yorkregion.com/news/crime/stripped-naked-kidnapper-sentenced-after-woman-tortured-in-search-of-1m-in-bitcoin/article_31b62635-2f9d-508e-8c97-04a1c2aa5b7a.html>
- **case 367** `BLOCKED` · October 7, 2024 · 35 y/o man · Bulgaria
<https://btvnovinite.bg/bulgaria/otvlichane-ot-mnimi-policai-za-14-bitkojna-razkaz-na-sluzhitel-na-sdvr-samo-pred-btv.html>
- **case 361** `BLOCKED` · November 22, 2025 · Crypto Exchange · Russia
<https://www.rbc.ru/spb_sz/23/11/2025/69232f6c9a7947d86f1e90a2>
- **case 258** `BLOCKED` · October 10, 2025 · unknown · Ukraine
<https://archive.is/El9EI>
## has 1 other source(s)
- **case 448** `THIN` · August 24, 2023 · Father of influencer Killian Desnos (alias "TeufeurS") · France
<https://france3-regions.franceinfo.fr/pays-de-la-loire/sarthe/le-mans/un-proces-aux-assises-requis-apres-l-enlevement-dans-la-sarthe-du-pere-de-l-influenceur-teufeurs-3286131.html>
- **case 444** `THIN` · March 31, 2026 · 25-year-old wife of a crypto investor · France
<https://france3-regions.franceinfo.fr/grand-est/bas-rhin/strasbourg-0/cryptomonnaie-deux-hommes-interpelles-pour-enlevement-et-sequestration-d-une-jeune-femme-a-strasbourg-3349945.html>
- **case 442** `THIN` · March 8, 2026 · Undisclosed individual · USA
<https://www.justice.gov/usao-edny/pr/rapper-known-lil-zay-osama-sentenced-14-months-prison-possessing-illegal-machinegun>
- **case 427** `THIN` · April 10, 2026 · Family · France
<https://france3-regions.franceinfo.fr/nouvelle-aquitaine/pyrenees-atlantiques/bayonne/cinq-hommes-cagoules-sequestrent-les-occupants-d-une-villa-du-pays-basque-pour-retrouver-un-chef-d-entreprise-lie-aux-cryptomonnaies-3334103.html>
- **case 370** `THIN` · April 27, 2024 · Family · Canada
<https://www.msn.com/en-ca/news/canada/b-c-family-tortured-for-13-hours-by-thieves-impersonating-mailmen-in-2m-crypto-heist/ar-AA1QU0ko>
- **case 424** `BLOCKED` · December 31, 2025 · Unnamed Brentwood resident · USA
<https://ktla.com/news/california/violent-crypto-robberies-los-angeles-bay-area/>
- **case 423** `BLOCKED` · December 22, 2025 · Unnamed Sunnyvale crypto holder · USA
<https://ktla.com/news/california/violent-crypto-robberies-los-angeles-bay-area/>
- **case 422** `BLOCKED` · December 17, 2025 · Unnamed San Jose crypto holder · USA
<https://ktla.com/news/california/violent-crypto-robberies-los-angeles-bay-area/>
- **case 417** `BLOCKED` · March 15, 2026 · Crypto Company CEO · France
<https://www.ouest-france.fr/economie/cryptomonnaie/enlevements-dans-le-milieu-de-la-cryptomonnaie-un-patron-cible-par-des-hommes-armes-la-nuit-derniere-pres-de-nantes-8cab17f0-2142-11f1-a6e8-58f5162ee52a>
- **case 414** `BLOCKED` · March 9, 2026 · Couple in their early 60s · France
<https://www.leparisien.fr/yvelines-78/le-chesnay-rocquencourt-900-000-euros-en-bitcoin-derobes-lors-dun-violent-home-jacking-09-03-2026-L2ZCB6SJSRB5VJJQEYSMI2ASTM.php>
- **case 393** `BLOCKED` · January 8, 2026 · A couple and 3 children · France
<https://www.ouest-france.fr/societe/faits-divers/un-couple-sequestre-avec-ses-enfants-chez-lui-en-sarthe-la-piste-des-cryptomonnaies-privilegiee-96d1b968-f2d1-11f0-bfca-235f15251990>
- **case 387** `BLOCKED` · January 5, 2026 · Young woman · France
<https://www.leparisien.fr/faits-divers/victime-dun-vol-de-cryptomonnaie-une-jeune-femme-sequestree-par-plusieurs-individus-cagoules-a-manosque-06-01-2026-WS2ED2I3UFHB7JRDMUE2XXRVYI.php>
- **case 384** `BLOCKED` · December 18, 2025 · Unidentified businessmen · Hong Kong
<https://archive.is/SOB70#selection-1145.40-1145.80>
- **case 360** `BLOCKED` · November 22, 2025 · Undisclosed · USA
<https://www.kron4.com/news/technology-ai/tech-expert-reveals-how-to-protect-your-cryptocurrency-after-11-million-theft/>
## has 2 other source(s)
- **case 411** `DEAD` · February 15, 2026 · Igor Komarov · Indonesia
<https://www.boredpanda.com/horrifying-discovery-in-bali-after-igor-komarov-ransom-video/>
- **case 431** `THIN` · April 20, 2026 · Family · France
<https://france3-regions.franceinfo.fr/bretagne/finistere/brest/5-membres-d-une-famille-de-ploudalmezeau-sequestres-pour-un-portefeuille-de-cryptomonnaie-3339032.html>
- **case 416** `THIN` · March 10, 2026 · Undisclosed person · France
<https://france3-regions.franceinfo.fr/paris-ile-de-france/seine-et-marne/sequestration-d-une-famille-en-lien-avec-les-cryptomonnaies-trois-hommes-mis-en-examen-3315843.html>
- **case 412** `THIN` · March 7, 2026 · Mainland Chinese businessman, 25 · Hong Kong
<https://www.binance.com/en/square/post/299288396127458>
- **case 412** `THIN` · March 7, 2026 · Mainland Chinese businessman, 25 · Hong Kong
<https://www.binance.com/en/square/post/299292754464081>
- **case 408** `THIN` · January 24, 2026 · Yong Wang, Chinese businessman · Turkey
<https://en.haberler.com/pure-chinese-torture-what-they-did-to-the-19596022/>
- **case 383** `THIN` · July 8, 2024 · Undisclosed · USA
<https://www.binance.com/en/square/post/24316542322970>
- **case 441** `BLOCKED` · March ?, 2026 · Crypto entrepreneur and his family · Canada
<https://www.journaldemontreal.com/2026/05/07/violations-de-domicile-une-famille-montrealaise-prise-pour-cible-pour-de-la-cryptomonnaie>
- **case 440** `BLOCKED` · March ?, 2026 · Crypto entrepreneur and his family · Canada
<https://www.journaldemontreal.com/2026/05/07/violations-de-domicile-une-famille-montrealaise-prise-pour-cible-pour-de-la-cryptomonnaie>
- **case 439** `BLOCKED` · March ?, 2026 · Crypto entrepreneur and his family · Canada
<https://www.journaldemontreal.com/2026/05/07/violations-de-domicile-une-famille-montrealaise-prise-pour-cible-pour-de-la-cryptomonnaie>
- **case 438** `BLOCKED` · January 28, 2026 · Crypto entrepreneur and his family · Canada
<https://www.journaldemontreal.com/2026/05/07/violations-de-domicile-une-famille-montrealaise-prise-pour-cible-pour-de-la-cryptomonnaie>
- **case 437** `BLOCKED` · May 7, 2026 · Couple · France
<https://www.leparisien.fr/faits-divers/bondy-frappees-et-ligotees-au-petit-matin-les-victimes-du-home-jacking-navaient-pas-de-cryptomonnaie-09-05-2026-IOMODLNJEZGJHOUEN37Z3NS2VM.php>
- **case 436** `BLOCKED` · March 23, 2026 · 57 y/o woman · France
<https://www.gendarmerie.interieur.gouv.fr/gendinfo/criminalite-organisee-et-enquetes/2026/crypto-rapt-en-haute-garonne-trois-nouvelles-interpellations-par-les-enqueteurs-de-la-section-de-recherches-de-toulouse>
- **case 431** `BLOCKED` · April 20, 2026 · Family · France
<https://www.letelegramme.fr/finistere/ploudalmezeau-29830/a-ploudalmezeau-une-famille-sequestree-puis-delestee-de-700-000-eur-en-cryptomonnaies-exclusif-7030440.php>
- **case 412** `BLOCKED` · March 7, 2026 · Mainland Chinese businessman, 25 · Hong Kong
<https://www.ccn.com/news/crypto/hong-kong-hotel-crypto-kidnapping-680k-and-42kg-of-silver-reportedly-stolen/>
- **case 389** `BLOCKED` · January 9, 2026 · 43 y/o Software architect/engineer · France
<https://www.ouest-france.fr/societe/faits-divers/jai-entendu-des-cris-dans-la-rue-enleve-au-petit-matin-pour-ses-cryptomonnaies-pres-de-cholet-f97a7740-ed71-11f0-ae78-1a0629cc1f87>
## has 3 other source(s)
- **case 451** `THIN` · July 20, 2023 · 56-year-old woman · France
<https://france3-regions.franceinfo.fr/pays-de-la-loire/sarthe/le-mans/un-proces-aux-assises-requis-apres-l-enlevement-dans-la-sarthe-du-pere-de-l-influenceur-teufeurs-3286131.html>
- **case 449** `THIN` · February ?, 2024 · Unidentified · USA
<https://www.justice.gov/usao-dc/pr/gothferrari-sentenced-78-months-prison-role-massive-cryptocurrency-heist>
- **case 410** `THIN` · February 5, 2026 · 8 Chinese nationals (ages 25-45) · Malaysia
<https://www.nst.com.my/news/nation/2026/02/1380692/12-cops-arrested-over-crypto-robbery-watch>
- **case 407** `THIN` · September 24, 2018 · William Sean "Tony" Creighton, CEO of 5Dimes · Costa Rica
<https://www.espn.com/chalk/story/_/id/27633251/american-bookmaker-found-dead-costa-rica>
- **case 407** `THIN` · September 24, 2018 · William Sean "Tony" Creighton, CEO of 5Dimes · Costa Rica
<https://www.gambling911.com/9-Individuals-Convicted-Murder-5Dimes-Owner.html>
- **case 402** `BLOCKED` · January 31, 2026 · Two adults · USA
<https://bitcoinethereumnews.com/tech/california-teens-arrested-in-scottsdale-home-invasion-over-66m-cryptocurrency-holdings/>
## has 4 other source(s)
- **case 446** `THIN` · May 11, 2026 · Undisclosed · France
<https://france3-regions.franceinfo.fr/grand-est/bas-rhin/strasbourg-0/un-homme-vise-par-deux-tentatives-d-enlevement-apres-des-transactions-en-cryptomonnaies-3349861.html>
- **case 445** `THIN` · May 10, 2026 · Undisclosed · France
<https://france3-regions.franceinfo.fr/grand-est/bas-rhin/strasbourg-0/un-homme-vise-par-deux-tentatives-d-enlevement-apres-des-transactions-en-cryptomonnaies-3349861.html>
- **case 460** `BLOCKED` · July 2, 2026 · 41 y/o Russian "Artem I." · Indonesia
<https://balidiscovery.com/russian-in-bali-kidnapped-for-30-hours-forced-to-hand-over-crypto-account/>
- **case 405** `BLOCKED` · February 12, 2026 · David Princay, CEO of Binance France · France
<https://bitcoinethereumnews.com/tech/binance-france-ceo-targeted-in-chaotic-double-home-attack-report/>
- **case 363** `BLOCKED` · December 28, 2024 · Daniel, (17 y/o) and his girlfriend · USA
<https://bitcoinethereumnews.com/bitcoin/former-lapd-officer-convicted-in-violent-350k-bitcoin-heist/>
## Special: La Provence, paywalled (serves cases 457 AND 458)
We hold only the opening 25%. The rest is behind the paywall and unreachable by any tool.
If you can read the full article, paste it and I'll file it into both case files. The missing
portion likely contains the Gignac-la-Nerthe detail (458) and any answer on the plate question.
<https://www.laprovence.com/article/faits-divers-justice/2193885092828214/quatre-hommes-arretes-en-plein-braquage-sur-fond-de-cryptomonnaies-pres-de-marseille>
- **Case 391** (Chinese national rescue, 2 arrested) — its only linked source (abs-cbn.com) is JS-rendered and returned no article body. Needs a manual/browser fetch or a replacement source. No usable article on file otherwise.
## Round-up articles needing per-case passage isolation (Claude to do, your review)
One article covers several different cases; each case file must keep only its own passage.
- Known set: 68, 315, 422, 445, 450.
- **375** (Trincity, Trinidad) — its cryptonews article bundles several separate Trinidad incidents (a St. Joseph car theft at para 17 is a different victim) then goes global. Left UNTRIMMED pending isolation.
- **Newly found: 423 and 424** — both link the SAME San Francisco Chronicle article (byte-identical), a multi-victim wrench-attack round-up. Left UNTRIMMED pending isolation so the two files don't cross-contaminate.
## Wrong-source / mismatched cases (the linked article does not describe this record)
- **Case 248** — the linked leparisien.fr article is a DIFFERENT incident (a woman assaulted at home in
Suresnes, France), NOT the Oslo Norwegian-family home invasion this record describes. That Suresnes
event is **case 242**, which already has the correct source — so the misfiled article belongs to 242's
story. Find a correct Oslo source for 248. (248's summary was written from its record fields only.)
- **Case 441** — its fetched sources (url_2, url_3) actually describe case 438 (same Montreal
home-invasion cluster, wrong incident). Decide: drop them, or move to 438.
- **Case 295** — the Forbes source (url_3) predates the event it is filed under, so it cannot be
reporting on it. Decide: drop or replace.
- **Case 358** — the DB url points to an unrelated thethaiger dog-in-floods story, not the Bangkok
kidnapping. Correct the URL and find the real source (also in the source-gap list — it is sourceless).
## Probable duplicate record
- **Case 323 ≡ Case 365** — almost certainly the same incident: three teenagers, a crypto-event host
kidnapped at gunpoint on the way home, driven to a remote desert (~1 hr out, White Hills AZ), ~$4M in
crypto + NFTs, released in the desert, victim walked ~5 miles to a gas station, a 4th person on
speakerphone. 323 (8News, court records) names the charged teens (Belal Ashraf, Austin Fletcher, both
16, Pasco County FL) and puts the event in **Downtown Las Vegas** — so 365's `notes` "Downtown LA" is a
typo. Decide whether to merge 365 into 323. (365's summary drops the city to avoid asserting the error.)
## DB record / flag corrections (surfaced while writing summaries — apply on the website)
Authoritative correction lists already exist: `corrections-register.json` (35 fixes, with status) and
`corrections-for-database.json` (per-record: id 321 victim, id 307 description, id 258 archive link,
id 460 name/ownership/amount/scene-list/weapons, id 462 weapons note, sheet row 18 scenario, sheet
row 252 wrong URL / Phuket case). Additional items found during the summary pass:
- **Case 334** — bulk summary said "Victim deceased"; WRONG. The victim (unnamed São Paulo businessman)
survived (thrown from the car, 3 fractured ribs, rescued by a truck driver); `life_taken = 2` is two
SUSPECTS killed by police. Also clarify whether `life_taken` counts perpetrator deaths (your earlier
rule was "counts victims", under which 2 would be wrong here).
- **Case 353** — `money_wanted` "100 million rubles" is misattributed (that figure is an unrelated
Irkutsk case in the same article's tail); this robbery took 100 GPUs / 4 containers, damage only
"could significantly exceed 1 million" (currency unspecified).
- **Case 301** — bulk summary "180 BTC" was wrong: it was 180 bitcoin mining MACHINES (ASICs).
- **Case 299** — `money_wanted` lists the four amounts as "Euros"; the Guardian source says POUNDS (£).
- **Case 290** — `description` says "$100,000" but the sums taken were Dhs300,000 + Dhs63,000.
- **Case 298** — `description` says "$1,000,000" while `money_wanted`/source say Dh4.12m.
- **Case 219** — `description` "beaten with a stick" contradicts the article (bag simply snatched from
behind, no violence); the flags (violence/weapons = 0) already match the article.
- **Case 218** — (a) `notes` say the husband fired, but the Daily Star article quotes Amouranth herself
("I believe I shot one of them"); (b) `theft = 0` but a MacBook WAS taken (she tracked it via Find My).
- **Case 221** — `date` = March 23 but the article says March 24 (twice); reconcile the day.
- **Case 252** — `description` "tortured for 4 days" and "possible mistaken identity" are not in the
linked Bitcoin.com article (it says only: held several days, found tied up). Confirm or soften.
- **Case 253** — flags all = 0 but the source shows an abduction, assault (hospitalised), firearm threat
and a forced crypto transfer → should be kidnappings 1, violence 1, weapons 1, theft 1.
- **`weapons` = 0 but a weapon was involved:** 321, 323 (gunpoint); 290 (knifepoint/blunt objects); 242
(knives + cleaver seized); 243 (tased); 245 (weapon recovered).
- **`theft` = 0 but property was taken:** 303 (Dh183k + phones/cheques); 297 (Dh1.7m cash); 273 (dog,
MacBook, jewellery); and see 218 above.
- **`kidnappings` = 1 but no abduction (attacked/robbed in place):** 293, 271, 273, 298.
- **Case 237** — `violence_torture` = 0 but the source says he was beaten; `theft` = 1 though nothing was
taken (released once found "broke").
- **Case 228** (NYC SoHo torture) — the linked ABC source withholds the victim's name; the DB `victim`
field carries "Michael V.T. Carturan". Confirm the name against a primary document before relying on it.
## Sheet-article furniture trim — deferred / accepted items (from the 2026-08-26 pass)
Most furniture was removed cleanly. A few items were left, deliberately:
- **Salford cluster (162, 169, 307, 354, 355)** — these share one Manchester Evening News
article (sheet row 164) embedded via the special shared-source path, so the furniture
trimmer did not touch it. It carries a few photo captions ("(Image: GMP)", "(From top left
to right) - Scott Armstrong…"). Low severity; trim row 164 once, and all five inherit it.
- **Other-case CONTENT (not furniture) left in, to revisit with the round-up bucket:**
235 Article 2 (France24 arrest piece names the Balland/Noizat incidents — see case 209),
254 Article 2 (references the Las Vegas case 323 and a France case as context). These are
coherent articles about a suspect/trend, so cutting is a judgment call, not furniture.
- **Accepted intra-line furniture (cannot remove without editing inside a line, which would
break the verbatim-line guarantee):** case 204 (a Thai "read the original" link is appended
to the last body sentence), case 218 ("Article continues below"/"View 4 Images" prefixes are
fused onto body sentences).
- **Residual furniture the automated scan missed (add to sheet-trim-decisions.json next pass):**
362 (sheet row 259: "Share / Article / Suggestions" nav lines); 353 (sheet row 133: a trailing
"Подробнее на Bits.media: <url>" line); 244 (sheet row 245, Article 2: a truncated "Read more at
<url>" stub).
## Source gaps found by the reconciliation sweep (add to manual queue)
- **Case 66** (Exxon Gas Station, East Lansdowne PA, 2020) — DB url is a Facebook video (facebook.com/watch), not an article. Find a text source.
- **Case 260** (Nate Geier, Singapore, Oct 2025) — DB url is the victim's own X post (x.com/nategeier). Not an extractable article; find reporting or treat the post as a primary quote.
- **Case 358** (35-y-o Chinese man, Bangkok kidnap, Nov 2025) — DB url is WRONG: it points to an unrelated thethaiger dog-in-floods story. Correct the URL AND find the real source.
- **Case 399** (Young trader, Dominican Republic, Oct 2025) — no url in the DB at all and no spreadsheet article. Sourceless; find one from scratch.
merge-output/sourced-articles.json
+4386
View File
File diff suppressed because one or more lines are too long
merge-output/sources/001_Hal-Finney.txt
+74
View File
@@ -0,0 +1,74 @@
================================================================================================
CASE 001 | Hal Finney | December 29, 2014 | USA
================================================================================================
DATABASE RECORD
id 1
date December 29, 2014
original_date December 29, 2014
year 2014
month 12
quarter 2014-Q4
victim Hal Finney
location Santa Barbara , California
country USA
scenario Swatting
description Bitcoin developer SWATted after months of harrassment & extortion
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 1
theft 0
life_taken 0
money_wanted (null)
coin_type (null)
reports Wired
notes 1 year extorsion turned into a swatting situation
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Hal Finney
**Attackers:** Unknown individual(s) through false police report
**Attack Method:** Swatting
**Violence Used:** Armed police response (false report)
**Crypto Stolen:** No theft completed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.wired.com/2014/12/finney-swat/
NOTES ON THIS FILE
* matched to sheet row 2: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Wired
URL https://www.wired.com/2014/12/finney-swat/
Origin reported_K&R sheet, row 2, column "Articles"
Length 4,825 chars
------------------------------------------------------------------------------------------------
An Extortionist Has Been Making Life Hell for Bitcoin’s Earliest Adopters
By Robert McMillan 12.29.14
The call came while Hal Finney was in the final stages of his five-year battle with Lou Gehrig’s disease. When the phone rang, his wife Fran was giving him a shower, with help from his nurse. Fran took the call, which came from a 911 emergency dispatch operator. “Are you OK?” the voice asked. “Is anyone being attacked in your house?”
Fran didn’t quite know what to make of the bizarre call, and the operator kept talking, in rather pleasant tones. “I need to let you know that you are about to have a SWAT team come to your home,” the voice said, “and they’re going to ask you to leave.”
When Fran poked her head out the door of her Santa Barbara home, she found the building surrounded by police, and a helicopter buzzing in the air above. It was just days after a disturbed young man named Elliot Rodger had killed six people near Santa Barbara’s University of California campus and the police were especially concerned. The cops yelled at her to drop her telephone and come out onto the lawn, and that’s what she did, leaving her disabled husband, her son Jason, and the nurse in house behind her.
The police eventually cleared the building, and Hal Finney, a noted computer cryptography expert, waited on the lawn for a half hour, shivering in the morning air. Fran worried that Hal, who was unable to swallow, might choke on his own saliva. “I was just panicking that he was going to need suction or something,” she says. “He didn’t have anything with him except his ventilator.”
The Finneys were the victims of a “swatting,” a nasty online hoax where the perpetrator calls up emergency dispatch using a spoofed telephone number and pretends to have committed a heinous crime in the hopes of provoking an armed police response to the victim’s home. In this case, the caller phoned 911, announced that he had just murdered two people, and said was going to kill himself too.
For a year, the caller had been demanding that the Finneys pay an extortion fee of 1,000 bitcoin—worth more than $400,000 at the time—and according to Fran Finney, the FBI agents working the case believe that Hal was just one of several people extorted in this way by the caller. The incident further exposes the rather bizarre and often criminal element that continues to hover around bitcoin, a digital currency that grew out of the internet underworld but has since expanded into the mainstream.
Previously, Fran Finney has not publicly spoken about this incident for fear of compromising the investigation, but she spoke with WIRED after the investigating agent gave her the go-ahead. The FBI did not have a comment for this story.
What I’m angry about is it took away some of the peace that he could have had for the last few months of his life.
When someone calling himself Satoshi Nakamoto first proposed the idea of bitcoin back in 2008, his ideas went largely unnoticed. But Hal Finney paid attention. He quickly became one of the world’s first bitcoin users. That early enthusiasm proved lucrative for Hal Finney, allowing him to join the digital currency’s network and “mine” many bitcoins during the early days. The stash helped the Finneys cover Hal’s medical expenses, but it also came at a price.
Hal Finney died in August, and his wife Fran says he spent his final months being harassed by the online extortionist. He called the Finney’s home number nine times in the two months after the attack, threatening to assault family members and expose their personal information. “What I’m angry about is it took away some of the peace that he could have had for the last few months of his life,” she says. “This was taking up a lot of his emotional energy.”
Roger Ver, another early bitcoin adopter, believes he was victimized by the same person the week before the Finney family was swatted. That’s when someone using the names Nitrous and Savaged hacked into Ver’s email accounts and demanded that he cough up 37 bitcoins—about $20,000 at the time—in order to prevent his private information from being published online. Ver refused, and the hacker apparently backed off after Ver put a 37 bitcoin bounty on his head.
Ver, who was himself sentenced to 10 months in federal prison for illegally shipping explosive across state lines, believes that Savaged is not only the same person who swatted Hal Finney, but also the person who gained access to Satoshi Nakamoto’s email account earlier this year. And he’s mad that this extortionist hasn’t been caught.
The “police have been devoting a huge amount of resources to track down peaceful people engaged in voluntary trade like Charlie Shrem and the operators of the Silk Road Market,” Ver says, “while evil hackers were busy terrorizing quadriplegic Hal Finney and his family.”
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 001
================================================================================================
merge-output/sources/002_Amanda-McCollum.txt
+102
View File
@@ -0,0 +1,102 @@
================================================================================================
CASE 002 | Amanda McCollum | January 3, 2015 | USA
================================================================================================
DATABASE RECORD
id 2
date January 3, 2015
original_date January 3, 2015
year 2015
month 1
quarter 2015-Q1
victim Amanda McCollum
location Atlanta, Georgia
country USA
scenario Armed Robbery in Public Space
description BTM thieves strike smoke shop, fire gun
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 1
theft 0
life_taken 0
money_wanted (null)
coin_type (null)
reports CT
notes A Bitcoin ATM was stolen. Seems like the suspecs were there before, asking questions about the ATM
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Amanda McCollum
**Attackers:** Unknown number of perpetrators
**Attack Method:** Armed Robbery in Public Space
**Violence Used:** Firearms
**Crypto Stolen:** No theft completed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://cointelegraph.com/news/stupidity-or-greed-why-steal-bitcoin-atm
NOTES ON THIS FILE
* matched to sheet row 3: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source CT
URL https://cointelegraph.com/news/stupidity-or-greed-why-steal-bitcoin-atm
Origin reported_K&R sheet, row 3, column "Articles"
Length 1,985 chars
------------------------------------------------------------------------------------------------
Bitcoin ATM Thieves Strike Atlanta Smoke Shop
Nov 4, 2015 at 22:11 UTC
Updated Nov 5, 2015 at 12:39 UTC
A smoke shop in Atlanta, Georgia, was robbed of its bitcoin ATM during a brazen heist this week.
According to a report provided to CoinDesk by the Atlanta Police Department, the Village Smoke Shop on Juniper Street had its Lamassu bitcoin ATM stolen at approximately 10:45 PM EDT on Tuesday night.
Video surveillance of the incident was published earlier today.
The incident report notes:
“When the suspects were confronted by employees, one of the suspects brandished a handgun and fired one into the floor of the business before fleeing with the machine. The suspects were observed entering a late 1980s model red Chevrolet Caviler [sic] with an unknown license plate.”
The video depicts an initial struggle to remove the ATM, which store manager Amanda McCollum says was bolted down to a table. The firearm’s discharge sparked a moment of panic in the store, as shown in the video.
McCollum – who confronted the robbers – said that she initially thought they were reacting to a problem with the machine itself. After the round was fired, McCollum said, those involved fled out and behind the building with the ATM, where a getaway vehicle was waiting. The Atlanta police incident report notes that two additional suspects were waiting in the car.
“[He] shoots the floor, and with the machine walks around back of the shop to the getaway vehicle that was parked behind our back alley and drives off with it,” she told CoinDesk.
Those behind the incident may have been planning the heist for some time. According to McCollum, two individuals came to the store last week and asked questions about the bitcoin ATM. The individuals later stole a wallet from the store’s office.
A representative for the Atlanta Police Department said that so far, there are no indications as to who was behind the robbery.
“Currently there are no leads in this case,” the department said in an email.
------------------------------------------------------------------------------------------------
ARTICLE 2
Source CT
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 3, column "Article 2"
Length 2,743 chars
------------------------------------------------------------------------------------------------
Stupidity or Greed? Why Steal Bitcoin ATM?
On November 3, two robbers stole a Lamassu Bitcoin ATM at the Village Smoke Shop in Atlanta, Georgia, according to local news website Clatl.com.
On November 3, two robbers stole a Lamassu Bitcoin ATM at the Village Smoke Shop in Atlanta, Georgia, according to local news website Clatl.com.
According to Atlanta’s Police Detective Scott Bowers, the thieves got away with Bitcoin ATM (also called BTM) filled with about US$2,000 as it was recently emptied. What’s more is that one of the perpetrators fired a gun shot, though luckily no one was injured.
It seems that the thieves wanted to get their hands on this machine in particular. Amanda McCollum, an employee in Midtown's Village Smoke Shop, witnessed the crime. She saw that the suspects “walked in, went straight to [the Bitcoin ATM], took it and only it, and walked out.”
However, stealing a Bitcoin ATM is not a good idea. While a Lamassu Bitcoin ATM itself is valued at US$7,000, the criminals would not be able to re-sell it because it is registered to the buyer with serial numbers linking them to the original owners. Moreover, no one except the owner will be able to get any bitcoins from the machines while most BTMs don’t hold a lot of cash inside as a rule.
Nevertheless, one must be cautious when installing a small BTM in the shop and security measures must be taken to prevent theft.
Co-Founder of CoinOutlet Bitcoin ATM, Eric Grill, told Cointelegraph:
“Thieves see these as machines that have a lot of cash in them just like a traditional ATM machine which obviously they are not. You need to make the machines very difficult to steal. This is exactly why having a small lightweight machine that is a vault for cash is a bad idea. One of the reasons CoinOutlet went with a large heavy model is based on years of experience with traditional ATMs where people would snatch and grab them making the almost impossible for anyone to steal. This incident is less about Bitcoin ATM. They are steel enclosures so they also aren't easy to get into and we also have a vault inside to protect the cash.”
While this is the first case of a BTM robbery in the US, it is not the first. In the beginning of year, Cointelegraph reported how two BTMs were stolen in Amsterdam in one swoop. One of these machines was a two-way BitAccess BTM from Thai restaurant and the second was a one-way General Bytes BATMtwo from a local cafe, which also served a dual role as the Bitcoin Embassy Amsterdam.
“We will just need to be a bit more selective on where exactly to place them,” said the owner of the General Bytes BTM, Martin Wismeijer, who’s also known as Mr.Bitcoin. “On top of that, newly placed BTM's will all be insured against theft.”
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 002
================================================================================================
merge-output/sources/003_Martin-Wismeijer.txt
+104
View File
@@ -0,0 +1,104 @@
================================================================================================
CASE 003 | Martin Wismeijer | January 22, 2015 | Netherlands
================================================================================================
DATABASE RECORD
id 3
date January 22, 2015
original_date January 22, 2015
year 2015
month 1
quarter 2015-Q1
victim Martin Wismeijer
location Amsterdam, Netherlands
country Netherlands
scenario Armed Robbery in Public Space
description Thieves steal 2 bitcoin ATMs
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 0
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports Bitcoinist
notes 2 Bitcoin ATMs were stolen
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Martin Wismeijer
**Attackers:** Unknown number of perpetrators
**Attack Method:** Armed Robbery in Public Space
**Violence Used:** Threats/intimidation
**Crypto Stolen:** Approximately 2 BTC
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://bitcoinist.com/two-bitcoin-atms-stolen-amsterdam/
NOTES ON THIS FILE
* matched to sheet row 4: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Bitcoinist
URL https://bitcoinist.com/two-bitcoin-atms-stolen-amsterdam/
Origin reported_K&R sheet, row 4, column "Articles"
Length 2,043 chars
------------------------------------------------------------------------------------------------
Thieves Steal Two Bitcoin ATMs in Amsterdam
Bitcoin ATM at Hofje van Wijn on Zeedijk
Two out of the six Bitcoin ATMs in Amsterdam have been stolen in recent weeks. These ATMs, which allowed customers to pay with the virtual currency, were located at Thais restaurant Warie's Thai Food on Rozengracht and at café 't Hofje van Wijs on Zeedijk. The theft at 't Hofje is particularly painful as it is considered Amsterdam's bitcoin embassy.
The theft is also a financial blow. The ATM at Warie's not only accepted bitcoin payments but also allowed for cash deposits, such as euros, to be exchanged. The equipment for this was valued at approximately 8700 euros. The ATM at 't Hofje was valued at around 2600 euros.
Keeping Quiet
The theft was noticed by the website Coin ATM Radar, which tracks the locations of bitcoin machines. The two Amsterdam machines suddenly stopped working. "We actually wanted to keep the news quiet," says Martin Wismeijer of the bitcoin collective Mr. Bitcoin, owner of the ATM on the Wallen, "because we were afraid that too much publicity would hinder the police investigation."
He doesn't want to reveal many details. The machines were stolen over the past four weeks, and there is no trace of the perpetrators. "I was really shocked when I heard that the machine had been stolen, especially since I paid for it with my own savings."
Foetsie
Since there is no official bitcoin bank, any euros deposited or received through the machines belong to the people who deposited or received them. This has also disappeared with the theft. This is probably why the thieves did it.
The machines cannot be used as is. As soon as they go online, they will be detected. Additionally, the software is secured. The theft does not deter Wismeijer. Last week, Mr. Bitcoin installed a payment ATM at the Mediamarkt on the Arenaboulevard.
"We will continue to set up machines because they are an important part of the success of bitcoin. They make the currency a bit less virtual." New machines are now insured against theft.
------------------------------------------------------------------------------------------------
ARTICLE 2
Source Bitcoinist
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 4, column "Article 2"
Length 2,324 chars
------------------------------------------------------------------------------------------------
Two Bitcoin ATMs Stolen In Amsterdam
Regular, cash dispensing ATMs have been a prime target for robberies since the technology was first born. But ATMs that dispense crypto-currency have had a more peaceful existence with no reported thefts. That is, until now. Late last month, two Bitcoin ATMs were stolen from two different businesses in Amsterdam.
Martijn Wismeijer, founder of the first “bitcoin atm collective,” Mr.Bitcoin, installed one of the machines that was stolen. “About two weeks ago, at Warries Thai food the door was forced and [thieves] removed the BitAccess ATM. This ATM was not owned by Mr.Bitcoin but we know the owner of the restaurant.” He went on to say, “The other ATM at Hofje van Wijs was a General Bytes unit, owned and installed by MrBitcoin. The burglars forced their way into the venue at 6:55 AM and also went for the safe, cash register and of course, the Bitcoin ATM.”
According to Wismeijer, the owners of the restaurants contacted the police as soon as they found out. “We kept it quiet while police were doing their research […] I do not expect anything from the police, this is Amsterdam.”
Whether the machines are ever returned, they will be of little value to the thieves. “The ATMs are useless as they are remotely disabled and contain no Bitcoin or other crypto. They can’t be switched on anymore as that would reveal the IP to the owner. We contacted the factory to disable the ATMs with these serials and [to] warn us if someone wants to enable them,” he said.
“They will have some fiat. These belong to the individual traders. Mr.Bitcoin lost the ATMs and the locations. All crypto is secured and should the ATM be moved or disabled, the connection to the ATM host is immediately cut. We keep most of our crypto in cold storage anyway so the crypto itself was never at risk,” he said.
The robbery of the ATMs leaves only two Bitcoin ATMs remaining in Amsterdam, which are located in Cafe Kobalt and Media Markt. Mr.Bitcoin said that currently the owners of the restaurants have not ordered new bitcoin atms to replace the stolen ones and currently do not have plans to do so.
Mr.Bitcoin operates 11 crypto-currency ATMs in numerous European countries, including England, the Netherlands and the Czech Republic. This theft marks the first ATM ever stolen from the company.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 003
================================================================================================
merge-output/sources/004_Dean-Katz.txt
+86
View File
@@ -0,0 +1,86 @@
================================================================================================
CASE 004 | Dean Katz | February, 2015 | USA
================================================================================================
DATABASE RECORD
id 4
date February, 2015
original_date February, 2015
year 2015
month 2
quarter 2015-Q1
victim Dean Katz
location New York, New York
country USA
scenario P2P Trade Gone Wrong
description Bitcoin trader robbed of $12,000 at gunpoint
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 1
theft 1
life_taken 0
money_wanted $12,000
coin_type BTC
reports Observer
notes forced him to transfer $8,500 worth of bitcoin. Took $3,500 in cash and split.
has_processed_date 0
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Dean Katz
**Attackers:** Unknown number of perpetrators
**Attack Method:** P2P Trade Gone Wrong
**Violence Used:** Firearms
**Crypto Stolen:** $12,000 in BTC
**Status:** Investigation ongoing
LINKED SOURCES
[url] http://observer.com/2015/02/bitcoin-crime-wave-breaks-out-in-nyc/
NOTES ON THIS FILE
* matched to sheet row 5: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Observer
URL http://observer.com/2015/02/bitcoin-crime-wave-breaks-out-in-nyc/
Origin reported_K&R sheet, row 5, column "Articles"
Length 4,737 chars
------------------------------------------------------------------------------------------------
Bitcoin Crime Wave Breaks Out in NYC
NYC firefighter kidnapped, robbed and stabbed by crypto thieves
By Jack Smith IV | 02/20/15 9:54am
Bitcoin is growing in popularity as a way of quickly and safely moving money. But that also makes the job of a thief much more lucrative and efficient. (Photo: Getty)
Bitcoin is growing in popularity as a way of quickly and safely moving money. But that also makes the job of a thief much more lucrative and efficient. (Photo: Getty)
Bitcoin, the technology that’s meant to revolutionize the way we think of money, is simultaneously revolutionizing the way we get mugged.
A New York City firefighter named Dwayne Richards was recently held up, stabbed and robbed by thieves who were after his bitcoin, the Observer has learned. From what we’ve discovered, Mr. Richards—who is a firefighter in lower Manhattan—was mugged and left bleeding after meeting the robbers under the pretense of exchanging bitcoin for cash in Williamsburg, Brooklyn. He’s alive, well, and refusing comment.
Dwayne Richards, on the 10th anniversary of 9/11. (Photo: Getty)
Dwayne Richards, on the 10th anniversary of 9/11. (Photo: Getty)
Typically, when we hear of bitcoin-related crimes, it’s a white-collar affair—millions of dollars going missing from an overseas exchange, or a plucky enthusiast finding himself in an international money laundering scheme.
But robbing someone of his bitcoin in person can be an astonishingly effective way to make off with vast sums of capital quickly and untraceably. And Mr. Richards is far from the first to fall victim to bitcoin-related brutality.
Stagecoach robberies
Dean Katz is a one-man bitcoin exchange. Every day, he drives around New York buying and selling bitcoin, on call to a large customer base. He’s like a weed delivery guy, only instead of delivering drugs, he’s bringing people the future of financial transactions.
One day, he received a call from someone who had heard about his services, either online or through a referral, who wanted to visit him out in Queens at a secure location.
“He called because he wanted to gamble during the Super Bowl, which is pretty common,” Mr. Katz told the Observer.
When the person arrived, he held Mr. Katz up at gunpoint and forced him to transfer $8,500 worth of bitcoin. Then, the robber took $3,500 in cash and split.
“Right now, it’s like the Wild West,” Mr. Katz said, “and stagecoach robberies are going to happen.”
Mr. Katz reported the incident to the police, but he’s heard from a number of other people who trade bitcoin in person that there have been other incidents. Some of the other occurrences have been physical robberies, others have just involved the use of counterfeit money—which as a hustling entrepreneur, he considers just as offensive.
Bitcoin may be a digital currency, but trading it in person is still one of the fastest and most reliable ways to exchange it. Signing on and having your account verified with an exchange can take weeks, and if you’re new to using cryptocurrencies, it’s helpful to have someone knowledgeable over your shoulder to walk you through the process.
Also, having someone with you in person is, ironically, a safer way to transact. It allows you to monitor the transaction and adds a layer of trust. Again, bitcoin is so new to so many people, so there are plenty of creative ways to defraud people online. It accounts for why LocalBitcoins, a platform for finding people to do business with in your area, is one of the largest trading platforms in the world.
But if the person you’re dealing with turns on you, you’ll find all of the benefits of bitcoin turning on you as well.
The Wild West
The best thing about bitcoin is that you can move vast sums of money nearly instantly without needing to go through a bank or centralized, governing body for approval or monitoring. But one thing banks are good at is dealing with thieves.
If someone held you up at gunpoint and made you wire your money from a bank account, a bank would be able to see the receiving account and, in most cases, link it to the person who goes to collect from that account. Bitcoin isn’t exactly anonymous, per se, but a thief who is smart and careful enough can make it nearly impossible to be linked to an account once he’s received his payload.
New York State is currently working on controversial legislation to legitimize and regulate bitcoin without totally clipping its wings as a revolutionary tool. Mr. Katz says that he hopes there will eventually be physical, centralized exchanges and centers where bitcoin can be traded in safe, public forums. Until then, he simply has to watch his back.
“Right now, it’s like the Wild West,” Mr. Katz said, “and stagecoach robberies are going to happen.”
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 004
================================================================================================
merge-output/sources/005_Dwayne-Richards.txt
+92
View File
@@ -0,0 +1,92 @@
================================================================================================
CASE 005 | Dwayne Richards | May 27, 2015 | USA
================================================================================================
DATABASE RECORD
id 5
date May 27, 2015
original_date May 27, 2015
year 2015
month 5
quarter 2015-Q2
victim Dwayne Richards
location New York, New York
country USA
scenario Kidnapping
description Firefighter kidnapped, robbed of $1,100, & stabbed by crypto thieves
kidnappings 1
violence_torture 1
drugs_alcohol 0
weapons 1
theft 1
life_taken 0
money_wanted $1,100
coin_type BTC
reports CNBC
notes kidnapped, robbed, and stabbed
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Dwayne Richards
**Attackers:** Unknown number of perpetrators
**Attack Method:** Kidnapping for ransom
**Violence Used:** Stabbing
**Crypto Stolen:** $1,100 in BTC
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.cnbc.com/2015/06/05/new-york-city-man-robbed-at-gunpoint-for-bitcoin.html
NOTES ON THIS FILE
* matched to sheet row 6: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source CNBC
URL https://www.cnbc.com/2015/06/05/new-york-city-man-robbed-at-gunpoint-for-bitcoin.html
Origin reported_K&R sheet, row 6, column "Articles"
Length 2,521 chars
------------------------------------------------------------------------------------------------
New York City man robbed at gunpoint for ... bitcoin?
Friday, 5 Jun 2015 | 3:14 PM ET
Put up your hands and start typing your PIN!
A New York man was robbed at gunpoint of $1,100 worth of bitcoin, police told CNBC.com on Friday.
The case is strongly similar to at least one other robbery in the Big Apple involving the digital currency earlier this year.
The latest combination street-cyber crime occurred at around 11:30 a.m. on May 27 in the Crown Heights section of Brooklyn.
The 28-year-old victim told police he went to a street corner there to meet a man who had answered his Craigslist.com ad offering bitcoins for sale, police said.
The purported buyer then led the victim to a car to complete the purchase, where another man sitting in the backseat pulled a gun and ordered the victim to electronically transfer the bitcoins to the thieves, cops said.
Read MoreBitcoin needs more consumer protection
After the victim sent the bitcoins, the thugs then took the victim's cellphone, and drove off, according to police. The victim then called 911.
"It's still under investigation," said the police spokeswoman. She said there was no surveillance video footage of the virtual money stickup available.
In February, the New York Observer reported quoted a bitcoin dealer named Dean Katz, who described how he had been robbed at gunpoint by a man in Queens who had arranged to meet him to buy bitcoin so the man could gamble on the Super Bowl. Katz said he was forced to transfer $8,500 worth of bitcoin and also was robbed of $3,500 in cash.
New York police on Friday gave additional details about that Jan. 22 robbery of Katz. They said he entered a car containing two other men at about 1:50 a.m. that morning to complete the sale.
"He was held at gunpoint and the suspects requested his Samsung phone and money," police said. Katz then got out of the car, and the suspects fled, cops said.
Read MoreBitcoin gets a rival—how will it fare?
No arrests have been made in Katz's case.
Katz also told the Observer he has heard from other bitcoin traders about additional strong-arm robberies of the digital currency as well as the use of counterfeit cash to buy bitcoin.
The Observer article said that a New York City firefighter had been stabbed during a robbery of bitcoins that he had agreed to sell. But police on Friday told CNBC that that robbery, which occurred on Feb. 9, "is not bitcoin related." The firefighter's credit card and PIN number were stolen, and he was stabbed in the arm, police said.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 005
================================================================================================
merge-output/sources/006_Robert-Nederhoed.txt
+68
View File
@@ -0,0 +1,68 @@
================================================================================================
CASE 006 | Robert Nederhoed | November 16, 2015 | Netherlands
================================================================================================
DATABASE RECORD
id 6
date November 16, 2015
original_date November 16, 2015
year 2015
month 11
quarter 2015-Q4
victim Robert Nederhoed
location Delft, Netherlands
country Netherlands
scenario Armed Robbery in Public Space
description Thieves steal bitcoin ATM containing 2,000 EUR
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 0
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports AD.NL
notes A Bitcoin ATM was stolen with 2,000 EUR in it
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Robert Nederhoed
**Attackers:** Unknown number of perpetrators
**Attack Method:** Armed Robbery in Public Space
**Violence Used:** Threats/intimidation
**Crypto Stolen:** Amount not disclosed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.ad.nl/binnenland/dieven-stelen-2000-euro-uit-bitcoinautomaat-in-delft~a315113e/
NOTES ON THIS FILE
* matched to sheet row 7: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source AD.NL
URL https://www.ad.nl/binnenland/dieven-stelen-2000-euro-uit-bitcoinautomaat-in-delft~a315113e/
Origin reported_K&R sheet, row 7, column "Articles"
Length 1,209 chars
------------------------------------------------------------------------------------------------
Thieves Steal 2000 Euros from Bitcoin ATM in Delft
Robert Nederhoed, a Delft entrepreneur, was not worried about losing a fortune in bitcoins, but the loss of 2000 euros hit him hard. Thieves stole his bitcoin exchange ATM from the city café De Waag on the Markt during the night. Customers of the café could exchange their banknotes for virtual bitcoins, which could be used to pay at the bar. At the time of the theft, the machine contained about 2000 euros in banknotes.
"Thieves had to put in quite an effort," says Robert Nederhoed, director of supplier Bitmymoney. "The 50-kilo machine was anchored to the ground and the wall, but that apparently wasn't a hindrance." Nederhoed believes the theft was a targeted attack. "Nothing else was taken from the café. The intruders only came for the ATM."
The entrepreneur doesn't think a new ATM will be installed anytime soon. "The machine was more of a playful gimmick. But a costly one, as a new one will set me back about 4000 euros. I don't think the investment is worth it."
Anyone interested in experimenting with bitcoins should keep their eyes and ears open. Nederhoed offers a reward of 10 bitcoins for a tip that leads to the recovery of the ATM.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 006
================================================================================================
merge-output/sources/007_Tadas-Kasputis.txt
+88
View File
@@ -0,0 +1,88 @@
================================================================================================
CASE 007 | Tadas Kasputis | July 11, 2016 | Lithuania
================================================================================================
DATABASE RECORD
id 7
date July 11, 2016
original_date July 11, 2016
year 2016
month 7
quarter 2016-Q3
victim Tadas Kasputis
location Kaunas, Lithuania
country Lithuania
scenario Kidnapping
description Cryptocurrency executive kidnapped at car wash
kidnappings 1
violence_torture 0
drugs_alcohol 0
weapons 0
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports Kauno
notes kidnapped, robbed, and threathened. Suspects were detained and investigated. A gang.
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Tadas Kasputis
**Attackers:** Unknown number of perpetrators
**Attack Method:** Kidnapping for ransom
**Violence Used:** Threats/intimidation
**Crypto Stolen:** Amount not disclosed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://kauno.diena.lt/naujienos/kaunas/nusikaltimai-ir-nelaimes/ne-bernvakario-pokstas-kaune-buvo-pagrobtas-bitkoinu-prekeivis-827044
NOTES ON THIS FILE
* matched to sheet row 8: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Kauno
URL https://kauno.diena.lt/naujienos/kaunas/nusikaltimai-ir-nelaimes/ne-bernvakario-pokstas-kaune-buvo-pagrobtas-bitkoinu-prekeivis-827044
Origin reported_K&R sheet, row 8, column "Articles"
Length 4,208 chars
------------------------------------------------------------------------------------------------
Kidnappers Threaten to Blind Bitcoin Trader in Kaunas
This summer, a shocking incident occurred in Kaunas when a man was forcefully pushed into a minibus. This was not a drunken prank but an attempt to unlawfully deprive someone of their freedom. The victim was 29-year-old Kaunas resident Tadas Kasputis. According to unverified reports, Kaunas residents E. J., R. G., M. Š., and Š. P. used physical force on July 11 near an automobile service station on Kaunakiemio Street in Kaunas. They pushed the victim into a "Ford Transit" van, tied his hands, drove him a short distance, and transferred him to another vehicle. There, they covered his eyes with a cap and drove around the Kaunas area until morning.
It is suspected that the kidnappers forced T. Kasputis to transfer 52 bitcoins (104,000 euros), but when they failed to obtain the login details, they demanded 300,000 euros. They allegedly threatened to blind their victim, harm his children, or destroy his property—burn his car.
The suspects took a safe containing a mobile phone, computer, cash, various documents, and payment cards. They also seized a wristwatch worth 10,000 euros and a similar gold bracelet. The total damage amounts to nearly 27,000 euros.
The court, considering that E. J., R. G., and M. Š. have been previously convicted and some have connections abroad, where they might flee or hide, imposed a one-month detention period on them. Š. P. was given a shorter detention period of 15 days, taking into account the extent of the charges against him, the current results of the pre-trial investigation, and the fact that this suspect has a family, a job, and a permanent residence. Due to these reasons, a shorter detention period was imposed than requested by the prosecutor.
These decisions can be appealed to the Kaunas Regional Court within 20 days.
The 33 and 29-year-old suspects were detained on Laisvės Avenue. These men, who have been convicted of various crimes multiple times, live in Kaunas. Another accomplice was detained on Šauklių Street. A 43-year-old man, who has also faced the wrath of Themis—convicted in other EU countries—was the oldest, 50-year-old, representative of the gang, detained near his home in Garliava. The detention operation lasted several hours.
Charges include unlawful deprivation of liberty, property extortion, theft, and manipulations with electronic payment instruments. They face up to ten years of imprisonment.
Called a Bitcoin Scammer
In the database of the International Consortium of Investigative Journalists, which coordinates the international investigation into the leaked documents of the Panamanian company "Mossack Fonseca," you can find Kaunas resident T. Kasputis. He is one of the owners of the company "Kaduceo LLP" registered in the United Kingdom. Incidentally, these confirming data are public and accessible in the British register even without the "Mossack Fonseca" documents.
T. Kasputis is titled a "bitcoin scammer" in specialized media. The portal siliconangle.com reports that the Kaunas resident is associated with not one affair involving virtual currency. The Lithuanian is linked to not one collapsed bitcoin trading system, allegedly appropriating the funds of its clients. The portal claims that T. Kasputis and his partners may have embezzled millions of dollars.
15min.lt managed to contact T. Kasputis. He confirmed being the person featured on siliconangle.com but stated that the portal is blackmailing him. "They are blackmailing me directly. That article is full of lies. If you noticed, similar articles no longer appear on other portals," he said.
The entrepreneur insists he is not involved in any of the affairs described by siliconangle.com. "Someone must have it in for me," he mused. "It would be great if that were true. I would be a millionaire," he added.
Kasputis also confirmed that he and his partners established "Kaduceo LLP" through "Mossack Fonseca." However, according to the entrepreneur, the company did not conduct any real activities. "It did not conduct any activities. A colleague registered it, and that's all," he said. Kasputis declined to reveal what activities "Kaduceo LLP" was supposed to engage in.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 007
================================================================================================
merge-output/sources/008_Steve-Manos.txt
+71
View File
@@ -0,0 +1,71 @@
================================================================================================
CASE 008 | Steve Manos | July 25, 2016 | USA
================================================================================================
DATABASE RECORD
id 8
date July 25, 2016
original_date July 25, 2016
year 2016
month 7
quarter 2016-Q3
victim Steve Manos
location West Palm Beach, Florida
country USA
scenario P2P Trade Gone Wrong
description Bitcoin trader robbed of $28,000 at gunpoint
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 1
theft 1
life_taken 0
money_wanted $28,000
coin_type (null)
reports Sun Sentinel
notes robbed
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Steve Manos
**Attackers:** Unknown number of perpetrators
**Attack Method:** P2P Trade Gone Wrong
**Violence Used:** Firearms
**Crypto Stolen:** $28,000
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.sun-sentinel.com/2016/07/27/boynton-beach-man-accused-of-robbing-28k-in-bitcoins-deal-deputies-say/
NOTES ON THIS FILE
* matched to sheet row 9: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Sun Sentinel
URL https://www.sun-sentinel.com/2016/07/27/boynton-beach-man-accused-of-robbing-28k-in-bitcoins-deal-deputies-say/
Origin reported_K&R sheet, row 9, column "Articles"
Length 1,885 chars
------------------------------------------------------------------------------------------------
Boynton Beach man accused of robbing $28K in Bitcoins deal, deputies say
Andre Allen, 34, of West Boynton, is accused of robbing a man of $28,000 when a man was trying to exchange the cash for Bitcoins in a Boston Market parking lot.
A man thought his $28,000 business transaction around midnight in the parking lot of a West Palm Beach Boston Market would go smoothly. Instead, it ended in armed robbery, according to a Palm Beach Sheriff's arrest report.
Deputies arrested Andre Allen, 34, of West Boynton as one of two men involved in the robbery.
The incident happened early Monday when Steve Manos, 32, of Lake Worth, met with two men, whom, he told deputies, he had done business with several times before. He wanted to exchange $28,000 in cash for Bitcoins, a digital currency for online transactions.
The exchange took place outside the restaurant at 2024 Military Trail. One of the men got into the front passenger seat of Manos' car, while the second man sat behind Manos, according to the report.
Manos handed over 28 bundles of $1,000 in a gift bag. The front seat passenger took out a laptop to finish the exchange, but he also pulled out a knife. He pressed it to Manos' chest, Manos told deputies.
Manos told the men to just take the money and leave. But a struggle ensued as the backseat passenger tried to grab Manos' gun out of the driver's door pocket.
The two robbers ran with the money. Manos chased them, but couldn't keep up, the report said. The suspects got into a Acura, and sped off.
Manos gave deputies a phone number he had used to contact one of the suspects to set up previous transactions. The deputies linked that number to Allen, and Manos picked him out of a photo lineup, according to the report.
Deputies arrested Allen the next day. He faces armed robbery, burglary and battery charges and is being held in Palm Beach County Jail on $31,000 bond.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 008
================================================================================================
merge-output/sources/009_Multiple.txt
+70
View File
@@ -0,0 +1,70 @@
================================================================================================
CASE 009 | Multiple | August 14, 2016 | Canada
================================================================================================
DATABASE RECORD
id 9
date August 14, 2016
original_date August 14, 2016
year 2016
month 8
quarter 2016-Q3
victim Multiple
location Toronto, Ontario
country Canada
scenario P2P Trade Gone Wrong
description Police arrest teens in string of bitcoin-related robberies
kidnappings 0
violence_torture 1
drugs_alcohol 0
weapons 0
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports Toronto.com
notes 5 to 6 teenagers stabbed people, robbed cash and other belongings by setting up fake P2P transactions
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Multiple
**Attackers:** Multiple teenagers
**Attack Method:** P2P Trade Gone Wrong
**Violence Used:** Physical violence
**Crypto Stolen:** Amount not disclosed
**Status:** Arrests made
LINKED SOURCES
[url] https://www.toronto.com/news-story/6810325-toronto-police-arrest-teens-in-string-of-bitcoin-related-robberies/
NOTES ON THIS FILE
* matched to sheet row 10: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Toronto.com
URL https://www.toronto.com/news-story/6810325-toronto-police-arrest-teens-in-string-of-bitcoin-related-robberies/
Origin reported_K&R sheet, row 10, column "Articles"
Length 1,178 chars
------------------------------------------------------------------------------------------------
Toronto police arrest teens in string of bitcoin-related robberies
Victims willing to pay cash for the digital currency targetted, police allege
Toronto police have arrested three teenage boys and are looking for two to three others in a series of bitcoin robberies in north Scarborough.
Police allege the victims posted ads on Kijiji, offering to pay cash for the digital currency.
“As a result, the suspects contacted them and set up meetings or arrangements to sell their bitcoins, which they didn’t have,” Det. Sgt. Gerry Heaney said. “They end up communicating back and forth through email and text.”
The suspects robbed the victims of cash and other property during the meetings.
During the first robbery in February, the victim was also stabbed twice and was taken to hospital with non-life-threatening injuries.
Three Scarborough males, ages 16 and 17, were arrested Friday night near Neilson Road and Finch Avenue in connection with three robberies.
Police are looking for two to three other teen suspects.
“People purchasing or trading in bitcoins should use extreme caution when meeting people,” Heaney said. “Meet in public areas and ensure that they’re not alone.”
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 009
================================================================================================
merge-output/sources/010_Tivoli-Brasserie.txt
+75
View File
@@ -0,0 +1,75 @@
================================================================================================
CASE 010 | Tivoli Brasserie | November 6, 2016 | Netherlands
================================================================================================
DATABASE RECORD
id 10
date November 6, 2016
original_date November 6, 2016
year 2016
month 11
quarter 2016-Q4
victim Tivoli Brasserie
location Oudenbosch, Netherlands
country Netherlands
scenario Armed Robbery in Public Space
description Dutch Bitcoin ATM Owner Laughs at Thieves Who Took His Machine
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 0
theft 1
life_taken 0
money_wanted (null)
coin_type bitcoin
reports ArchiveOrg
notes Bitcoin ATM stolen
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Tivoli Brasserie
**Attackers:** Unknown number of perpetrators
**Attack Method:** Armed Robbery in Public Space
**Violence Used:** Threats/intimidation
**Crypto Stolen:** Undisclosed amount of bitcoin
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://web.archive.org/web/20190510113124/https://bitsonline.com/bitcoin-atm-stolen-netherlands/
NOTES ON THIS FILE
* matched to sheet row 11: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source ArchiveOrg
URL https://web.archive.org/web/20190510113124/https://bitsonline.com/bitcoin-atm-stolen-netherlands/
Origin reported_K&R sheet, row 11, column "Articles"
Length 3,057 chars
------------------------------------------------------------------------------------------------
Dutch Bitcoin ATM Owner Laughs at Thieves Who Took His Machine
Thieves stole a bitcoin ATM installed in Oudenbosch, Netherlands last Wednesday by lifting and carrying it away. With bitcoin’s high prices attracting newcomer crooks as well as investors, it’s unclear if the thieves really understood what they were stealing.
Bitcoin is a virtual currency, which thieves would not be able to access simply by stealing the machine, the owner said. The ATM had operated at the Tivoli Brasserie in Oudenbosch since 2014. Thieves stole only the bitcoin machine, and nothing else.
Herman Vissia, owner of the machine said: “Bitcoins are virtual coins, so I think it’s logical that they do not get out of the machine. They would have thought they hit a jackpot with a full-blown machine.”
Customers buy BTC by feeing paper cash in the machine, so it’s possible that’s what the thieves were really after. Still, bitcoin ATMs don’t process the kind of transaction volumes bank machines do — even in cash, the takings were probably not worth the physical effort.
“What an Idiot” Says ATM Owner
The ATM was run by Byecoin, a popular bitcoin ATM operator. The company has two available machines, one at Oudenbosch (which got stolen) and the other at Eindhoven. Vissia said “What an idiot”, referring to the actions of the thieves. He found the whole act foolish, and had a laugh over it, according to the local press.
Vissia believes it would take three people to lift the Lamassu machine — as it weighs around 265 lbs (120 kg). Hence, he is certain that three or more robbers carried out the theft.
Along with regular people, all types of criminals are gaining interest in cryptocurrencies. Physical theft is a new addition to the existing long list of hackers, phishing websites, investment scams, and dummy wallets that aim to steal bitcoin and other digital currencies.
Since bitcoins don’t exist in the physical world, they’re actually much harder to steal than cash, gold or diamonds. Muggings associated with local P2P trades are more likely to involve victims being relieved of hard cash, than BTC.
No Bitcoins in the Machine
In Vissia’s opinion, the thieves would have completely dismantled the bitcoin ATM. He said: “They will have broken it completely to get the contents out.” He added, “At the new vending machine they place a sign which will read — There are no bitcoins in here!”
Bitcoin ATMs are often connected online to a third-party exchange — the machine itself does not hold the private keys. Even if they did, cracking the machine open wouldn’t give you access to them.
A similar incident occurred in India just a couple of months before. The thieves, who possibly couldn’t read, actually stole a passbook printing machine instead of ATM.
Either the Dutch thieves were foolish too, or they were after the cash — which they could have probably stolen much easier elsewhere. These capers are reminiscent of the notorious scene in Breaking Bad, where two drug addicts haul a bank ATM to their living room but are unable to open it. It ends gruesomely.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 010
================================================================================================
merge-output/sources/011_Josoj.txt
+55
View File
@@ -0,0 +1,55 @@
================================================================================================
CASE 011 | Josoj | February 16, 2017 | UK
================================================================================================
DATABASE RECORD
id 11
date February 16, 2017
original_date February 16, 2017
year 2017
month 2
quarter 2017-Q1
victim Josoj
location London, England
country UK
scenario P2P Trade Gone Wrong
description Description of robbery during Localbitcoins trade with Bitcoin Uncensored interview and the robber's side of the story.
kidnappings 0
violence_torture 1
drugs_alcohol 0
weapons 1
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports BitcoinUncensored
notes to listen!
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Josoj
**Attackers:** Unknown number of perpetrators
**Attack Method:** P2P Trade Gone Wrong
**Violence Used:** Physical violence
**Crypto Stolen:** Amount not disclosed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://go.ivoox.com/rf/17187103
NOTES ON THIS FILE
* matched to sheet row 12: exact match on victim + year, unique on both sides
OTHER LINKED SOURCES
[NOT AN ARTICLE] url None — video or social post; recorded as a source reference, not transcribed
https://go.ivoox.com/rf/17187103
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 011
================================================================================================
merge-output/sources/012_Rocelo-Lopes-wife.txt
+244
View File
@@ -0,0 +1,244 @@
================================================================================================
CASE 012 | Rocelo Lopes' wife | February 26, 2017 | Brazil
================================================================================================
DATABASE RECORD
id 12
date February 26, 2017
original_date February 26, 2017
year 2017
month 2
quarter 2017-Q1
victim Rocelo Lopes' wife
location Florianopolis, Brazil
country Brazil
scenario Kidnapping
description After months of preparation, wife of crypto exchange owner was kidnapped for ransom. She was rescued 3 days later.
kidnappings 1
violence_torture 0
drugs_alcohol 0
weapons 0
theft 0
life_taken 0
money_wanted (null)
coin_type (null)
reports Bitcoin World Tour, CCN, Business Insider
notes OG publicly knonw, appeared in local media, corrupted banker sold him out to kidnappers
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Rocelo Lopes' wife
**Attackers:** Unknown number of perpetrators
**Attack Method:** Kidnapping for ransom
**Violence Used:** Threats/intimidation
**Crypto Stolen:** No theft completed
**Status:** Victim rescued; suspects arrested
LINKED SOURCES
[url] https://bitcoinworldtour.org/2017/05/11/victim-of-brazilian-bitcoin-ransom-kidnapping-plot-rescued/
NOTES ON THIS FILE
* matched to sheet row 13: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Bitcoin World Tour, CCN, Business Insider
URL https://bitcoinworldtour.org/2017/05/11/victim-of-brazilian-bitcoin-ransom-kidnapping-plot-rescued/
Origin reported_K&R sheet, row 13, column "Articles"
Length 4,068 chars
------------------------------------------------------------------------------------------------
Bandits Demand 'Digital Currency' for Ransom in Kidnapping
The kidnapping of a 32-year-old woman from Florianópolis ended this past weekend in São Paulo with the "busting" of the hideout and the release of the victim without the payment of ransom.
Despite the success of the police action, this crime has raised concerns for public security in the country due to the way the criminals demanded the payment of ransom: via cryptocurrencies. Known generically in the digital world as bitcoins, this digital money is used for legal purchases of products, but also for various illegal transactions.
A credit purchased in Brazil, for example, can be withdrawn as cash anywhere in the world or used to buy weapons and drugs on the so-called "deep web" – the deep internet. In addition to being exempt from fee charges, the transactions are made without the possibility of tracking.
The demand for digital currency was previously known to the police in extortions for the release of data, such as in hacker actions to steal email and social media passwords, for example. In what the police themselves call common crimes, this is a completely new case.
"This [ransom demand with digital currency] is not rare. This is unprecedented in the world," said delegate Anselmo Cruz, of the Antikidnapping Division of Santa Catarina and responsible for the investigation. "What is the attempt here? Instead of having someone carrying money, going to another place to hide the money, they can do this with a click. Something instantaneous."
For sociologist Luís Flávio Sapori, a professor at PUC Minas and a member of the Brazilian Security Forum, this news deserves the "full attention of security forces" as it opens a series in the country. "This is a very worrying case that could inaugurate a new era of kidnappings in Brazilian society, a type of crime that has fallen into disuse in the last 20 years," he says.
The victim of the kidnapping is the wife of Brazilian entrepreneur Rocelo Lopes, owner of CoinBr, the largest company in Latin America for cryptocurrency trading. The couple has lived in SC since 2015. She was attacked around 1:30 PM last Thursday (26) at Lagoa da Conceição, an upscale area of Florianópolis, shortly after dropping her six-year-old daughter off at school.
Since the addresses are close, the woman was walking back home. After being put into a vehicle, she was transported to a house in Cangaíba, a neighborhood in the eastern zone of the capital of São Paulo, where she remained in the power of the gang until last Saturday (29).
About two hours after the attack, one of the bandits contacted the entrepreneur to request payment of the ransom.
Immediately, the gang's interlocutor informed how they wanted the payment. "We don't 'want' any fucking reais, no. We 'want' in the coins... in cryptocurrencies, got it? We 'want' to receive in cryptocurrency," says the criminal in an audio message.
The initial ransom demand was in two types of coins, Zcash and Monero, which are harder to track. However, the amount indicated that the criminals had limited information about this type of trading, as the demand totaled around R$ 115 million. "I thought it was a prank and hung up the phone," Lopes told Folha.
In the following negotiations, the value was reduced to R$ 5 million, but it did not end up being paid. With the help of São Paulo police, teams from the Civil Police of Santa Catarina found the hideout on Saturday morning. One man was arrested in the action. According to police, he had no criminal record and claimed to have been hired only to take care of the house.
The victim, according to the family, did not suffer any physical aggression.
The Catarinense police continue investigations to try to discover who the accomplices of the arrested are. The main suspicion is that there was the participation of six men in the action, all based in São Paulo and possibly linked to the criminal faction PCC. Delegate Cruz, of the Antikidnapping Division of SC, says he believes the crime had been planned for at least nine months.
------------------------------------------------------------------------------------------------
ARTICLE 2
Source Bitcoin World Tour, CCN, Business Insider
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 13, column "Article 2"
Length 2,402 chars
------------------------------------------------------------------------------------------------
Victim of Brazilian Bitcoin Ransom Kidnapping Plot Rescued
A 32-year-old Brazilian woman was recently rescued by the Civil Police on the east side of São Paulo, Brazil. The woman, married to a bitcoin businessman, was kidnapped in Florianopolis on Wednesday. The ransom was demanded in bitcoin and another unnamed cryptocurrency, according to local publication Diário Catarinense.
The kidnappers approached the victim right after she dropped her daughter off at school, 50 meters away from where she lives. While on their way to the city, the kidnappers contacted the victim’s husband demanding the ransom, sending him a video of the victim in which she said she didn’t know where she and that was being kidnapped.
According to Anselmo Cruz, the officer in charge of the investigation from Dec, a criminal investigation unit, this is the first time kidnappers in Brazil demand a cryptocurrency ransom. Access to bitcoin, according to the police, would be given by the victim’s husband.
In a translated statement, Mr Cruz said:
“Early on in the investigation, I spoke with a few colleagues from all over Brazil and there was never a kidnap attempt in which a payment in virtual currency was demanded. This is unprecedented in Brazil. The main goal was to expedite the transaction, but that wasn’t possible.”
The husband then contacted the police and started negotiating with the criminals – who demanded a “large amount of bitcoin” – in an attempt to delay paying the ransom. The victim’s husband told criminals that cryptocurrency’s trading volume in the country wasn’t large enough for him to have the demanded amount available.
Due to bitcoin’s nature, it would be extremely hard for police to track down the criminals based on the address they would use to receive the money. During negotiations, however, the officers were able to locate and rescue the woman.
Police believe the victim was handpicked, and that there were at least six people involved in the crime. So far, only one has been arrested and the investigation is ongoing.
Officer Raphael Werling, who participated in the operation, said:
“It was a very difficult operation, but we managed to free the person. She isn’t injured.”
The victim’s daughter turned six this Saturday, the 29th, the day her mother was rescued. Her husband told local news agencies having her mother back was the best birthday gift she could ever get.
------------------------------------------------------------------------------------------------
ARTICLE 3
Source Bitcoin World Tour, CCN, Business Insider
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 13, column "Article 3"
Length 16,965 chars
------------------------------------------------------------------------------------------------
Kidnapped for crypto: Criminals see flashy crypto owners as easy targets, and it has led to a disturbing string of violent robberies
When the kidnappers told Rocelo Lopes they had taken his wife, he didn't believe them.
The then-46-year-old cryptocurrency entrepreneur received a phone call early one evening in April 2017, while he worked from his office in the Brazilian island city of Florianópolis, telling him to expect a formal ransom demand in bitcoin in the coming hours. "This is just another scammer. This is someone trying to be funny with me," he thought, and he hung up the phone.
He checked in with his family's maid anyway. His 32-year-old spouse had taken their daughter to school hours earlier, only a stone's throw from the family home, but never came home, the maid said. She didn't know where his wife had gone. That's when Lopes checked his home's security-camera system.
Blurry CCTV footage from shortly after lunch that day showed several people loitering on the street just past his garden. His wife walked down the sidewalk toward their home when a man in a black-and-white top approached her.
She recoiled. A person in white swooped in behind her to intercept her. The huddle momentarily disappeared behind a fence. A few seconds later, pressed close to the person in white, she was hurried down a side street, and vanished.
"It's hard when you see someone you love is taken from you. It's really, really difficult," he said in an interview. "My first thing was: 'Holy shit. What am I going to do now? I have no idea.' I was not prepared for that kind of situation."
Lopes had made a name for himself in Brazil as the head of the blockchain firm CoinBR and a few months earlier had sold the operation to Stratum, where he still worked. The kidnappers' demands were high. They wanted tens of millions of dollars, paid in various cryptocurrencies.
"Either you pay, or we kill her," Lopes recounted the hostage-takers telling him via WhatsApp. "We're gonna send pieces of her to you."
The cryptocurrency boom has created a new class of wealthy quasi-celebrities.
Investors and techies who made early bets on crypto are now hailed as revolutionary financial prophets and gilded with the allure of sudden wealth — often flaunted through a conspicuous-consumption culture of "Lambos," yacht parties, aggressive boostering, million-dollar profile pictures, and crypto-branded everything.
In the process, some have become prime targets for opportunistic criminals.
The flashiness of crypto aficionados can make them targets for criminals. Joe Raedle/Getty Images
Hacks and digital scams are a dime a dozen in crypto circles — but security experts, investors, and others in the space say not enough attention is being paid to physical crimes targeting crypto owners, from simple robberies to home invasions, kidnappings, torture, and even murder.
Such attacks illustrate a fundamental weak link in the blockchain-based digital currencies that tout new levels of financial security and privacy: For all the complex cryptographic math that underpins the integrity of cryptocurrencies, if someone with a gun forces you to hand yours over, there's not much you can do about it.
That's no different than any other sort of wealth stuff, right? You're flashy about what you have, then you're more likely to be robbed.
Jameson Lopp, a privacy-focused technologist and bitcoin advocate, has made a habit of tracking physical security threats to cryptocurrency users. His interest in the subject is personal. In October 2017, a heavily armed police unit descended on his North Carolina home after an anonymous hoaxer swatted him, submitting a false hostage report to law enforcement, as part of an effort to extort him for bitcoin.
"On one hand it was a kind of amusement and bewilderment because I knew about swatting stuff — it was always something that I figured would only really happen to celebrities," he said. "On the other hand it was extreme anxiety and, you know, not wanting the cops to run into my house and potentially shoot my dog."
Since then, he has been tracking physical attacks targeting crypto owners, from swatting attempts like the one he faced to kidnappings and more. He has identified almost 100 incidents publicly reported in the media over the past few years, and he believes that number is most likely a drastic undercount as a result of victims not wanting to attract more attention from criminals.
Lopp's list reads like a comprehensive primer to different flavors of violence across the globe. A man who was drugged by his Tinder date to induce him to give up his passwords. A 14-year-old schoolboy in Northern England who was beaten and held for ransom after bragging on social media about his crypto-trading profits. A digital trader in the Netherlands targeted by attackers dressed as police officers who broke into his home in 2019 and tortured him with an electric drill in front of his 4-year-old daughter in an attempt to force him to surrender his crypto holdings.
These incidents have become colloquially known as "$5 wrench attacks" — a reference to a webcomic by the "xkcd" artist Randall Munroe in 2009. It jokes about how a "crypto nerd" might like to imagine that a bad guy's plot is foiled when faced with unbreakable encryption, but the reality is often simpler: "Drug him and hit him with this $5 wrench until he tells us the password." (This forcible approach to obtaining someone's private keys is also euphemistically known among cryptographers as "rubber-hose cryptanalysis.")
Cryptocurrencies are different from other financial assets in one important way: Most assets in finance today are no longer "bearer assets," Lopp said. "They're generally controlled by some sort of authority that can revoke access or return access if it gets transferred incorrectly," he said, describing bitcoin as "really more of a reversion back to a gold or physical-commodity type of asset such that if you get ahold of it and you can get away with it, then no one can just claw back."
Casa Ceo Jameson Lopp sits on a sofa in an old bank vault while wearing formal attire
Jameson Lopp, who cofounded Casa, beefed up his security and starting tracking attacks on crypto-industry figures after he was swatted. Casa
Combined with the lack of real identities tied to digital wallets, and their ease of transferability — the keys for tens of millions of dollars' worth of bitcoin can be stuck on a USB stick, inconspicuously emailed, or even written down and mailed — crypto is a uniquely attractive target.
Crypto owners make themselves easy targets
In the early hours of a June morning in 2021, an entrepreneur stumbled out of an after-party for the Bitcoin Miami conference and into what he thought was an ordinary cab waiting outside a South Florida club.
The driver asked for his passenger's phone for "directions," and, intoxicated, the entrepreneur handed it over. But the driver kept asking for his phone pin, and the entrepreneur slowly realized he was being driven the opposite direction of his hotel. The driver then demanded more than $100 — far more than the fare — before he'd take him home.
After somehow persuading the driver to temporarily pass his phone back, the entrepreneur jumped out at a red light, miles away from his hotel, only to realize the driver had disabled his phone by removing the SIM card.
The pair hadn't directly discussed crypto, and it's unclear whether the driver was planning to look for digital-currency wallets on the phone or whether it was instead a traditional robbery attempt. But, the entrepreneur told Insider in an interview, the abundance of wealthy cryptocurrency owners in the area was hardly a secret: "This was BTC Miami. If you've been around that week, you know, there's a bunch of crypto people there."
For the entrepreneur it was a reminder of the vulnerability of his cryptocurrency holdings. Had the driver accessed his on-phone crypto wallet, he said, "he could've stolen enough for a house payment."
Much of the vulnerability is a result of the crypto community's own actions.
With its public displays of braggadocio and financial boasting, the crypto culture is inherently performative. Bullish crypto devotees identify themselves by adding laser eyes to their online profile pictures, and they broadcast their predilection for preferred coins with all manner of memes and catchphrases.
It's not hard to find people sharing their latest crypto trades on Twitter and Instagram, bragging about their commitment to hanging (or "hodling") on to all their crypto holdings and showing off some of the expensive, often bitcoin-branded swag they've acquired thanks to their crypto riches.
That kind of behavior is a beacon to enterprising criminals, said Rigel Walshe, a burly, tattoo-covered New Zealander who worked as a cop protecting his nation's prime minister before becoming a developer at a crypto startup. "You could, if you've done your homework, find a person or a group of persons where if you and a team of five well-trained individuals showed up with a gun, you'd very likely be able to walk out with a very substantial amount of money," Walshe said.
He added: "That's no different than any other sort of wealth stuff, right? You're flashy about what you have, then you're more likely to be robbed."
NFTs — like the Bored Ape Yacht Club images — are clear displays of wealth, and some have sold for millions of dollars. Joe Raedle/Getty Images
It's unclear just how widespread crypto kidnappings are, and many may go unreported. MARCO BELLO/AFP via Getty Images
NFTs — buzzy, art-linked digital assets — also present unique security risks. They're often used as flashy profile pictures on public-facing social media, and there are clear records of their sometimes-astronomical values (the famous "Bored Ape Yacht Club" NFTs have been sold for multimillion-dollar sums), but custodial tools aren't yet readily available to most people for protecting them.
"These NFTs are starting to be worth a lot of money, millions of dollars," a venture investor warned. "For the most part, I don't think they're using institutional-grade custody solutions."
"They're just in someone's wallet," he continued, calling it "extremely scary."
Unlike cybersecurity threats, like phishing and hacking, that have become well-understood among the public, there is less thought paid to real-life assaults — in part because such physical robberies are more difficult to pull off and, consequently, much less common. And, as was the case with two clients of the security consultant Karl Perman, victims often prefer to stay mum. Despite losing millions in digital assets as a result of home invasions last year, the victims avoided all publicity about the burglaries, Perman said, with one not even talking to the police.
The total number of such attacks is unknown, and it's unclear to what degree they're on law enforcement's radar. An FBI representative, when asked whether the agency tracked these crimes or whether the bureau could comment on their prevalence, said "we do not have information to provide."
But crypto crime is almost as old as cryptocurrency. The first cryptocurrency enthusiast to grapple it with appears to have been Hal Finney, a 58-year-old cryptographer and early bitcoin adopter who some suspect may have secretly been Satoshi Nakamoto, the pseudonymous creator of bitcoin.
Finney had the degenerative disease ALS, and in the months before he died in 2014 he was subjected to a vicious extortion campaign by an assailant demanding $400,000 worth of bitcoin. At one point his home was swatted, with the prank call prompting an armed police response.
Fake names, panic rooms, and the lockbox in the forest
Michael Arrington, a media entrepreneur turned crypto investor, recently tweeted that he was "forced" to move out of an 8,300-square-foot Miami home, which he had recently purchased for $16 million. Arrington accused a Sotheby's real-estate agent of leaking information about the deal, sabotaging the efforts he said he'd taken to keep the home's location a secret "because of the unique and violent security threats against people in crypto."
Awareness of the risks is rising among some members of the gilded crypto class. Some have taken it to the extreme, going so far as to cloak their identities with usernames and pseudonyms — even among their coworkers — to maintain anonymity and personal security.
Demand for high-tech physical security gear and services is growing. Many owners of crypto rig up their homes with visible alarms and cameras. Panic rooms are not unheard of at some particularly wealthy figures' properties, according to tech workers, along with executive-protection agents — as well as sniffer dogs that have occasionally been seen patrolling the grounds at parties.
People don't need to make themselves invulnerable; they just need to create enough of a hassle to make attackers decide to go after easier targets, said Nick Neuman, who cofounded the crypto-security firm Casa with Lopp and is its CEO. "It's kind of like the joke or metaphor of running from the bear," he said. "You just need to not be the slowest person."
For some crypto owners that means using "custodial" services like Anchorage, Coinbase Custody, or Fireblocks to remotely store their crypto assets for them, essentially serving as a digital bank vault. This makes it more difficult for anyone to steal them or forcibly obtain them. "If you kidnap me today, I have no direct control of the funds," a venture capitalist said of his firm's holdings. An alternative is "multisig" wallets, where the consent or signatures of multiple "key holders" are required to move funds — protecting assets even if one person is compromised.
But given the ethos of fierce independence among cryptocurrency devotees, there's an inherent wariness of third-party services. A core tenet of the crypto culture is "Not your keys, not your coins." It refers to the idea that decentralized networks like bitcoin allow people to transact directly, without intermediaries. If you're relying on a bank-like service to hold the keys to your crypto, it's arguably no longer really yours.
In some cases, crypto owners have resorted to decidedly old-fashioned methods to protect their high-tech treasures. One well-connected tech-industry figure said he knew someone who kept the keys to $350 million worth of cryptocurrencies in a physical safe and had another contact who buried the private keys for millions of dollars of cryptocurrencies in a forest for safekeeping.
Rocelo Lopes spent days trying to persuade his wife's abductors not to harm her — and trying to persuade them to lower their initial demand of an eye-watering $40 million, to be paid via the privacy-focused cryptocurrencies ZCash and Monero.
Eventually, the price dropped as low as $2 million. Then the kidnappers screwed up. They had been communicating with him via the encrypted messaging app WhatsApp, but one of them finally placed a call to him from a payphone near their location.
Despite the warnings not to, Lopes had secretly looped in law enforcement, and police investigators were able to identify the hostage-takers' location: São Paulo, a 10-hour drive away. Armed police officers descended on the location and were able to free the hostage and arrest many of the conspirators, killing one in the process. Lopes' wife was unharmed.
In the aftermath, he reassessed his approach to security. His family moved to a more secure condominium, bought a bulletproof car, and hired bodyguards to protect his wife and children.
At the time Lopes' wife was kidnapped in 2017, bitcoin was on an upward tear at about $1,300 a coin. In 2022, bitcoin and other cryptocurrencies are worth many times that. Even after the recent crash in crypto values, bitcoin is worth nearly $44,000 a coin — and many owners of crypto assets are no better prepared than Lopes was in 2017.
In November, attackers broke into the Spanish home of the social-media entrepreneur Zaryn Dentzel and tortured him in an attempt to force him to give up tens of millions of dollars in bitcoin. Ten days later, thieves elsewhere in Spain forcibly stole a bitcoin ATM from a Barcelona store after ramming it with an SUV. The following month, two men were arrested in Indonesia over a robbery that cost a couple $400,000 in cryptocurrency and cash. Two weeks after that, 11 people serving time at a jail in Ontario were accused of taking two of their fellow prisoners hostage to force them to transfer their cryptocurrency holdings.
"This is still pretty niche and edge-case type of thing," Lopp said. "But you know as the space goes more mainstream, it's something that we expect to come up more and more often — just because more malicious-minded people will be testing out to see what the risk and reward is for trying to physically attack people who have bitcoin and other digital assets."
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 012
================================================================================================
merge-output/sources/013_3-Indian-Bitcoin-traders.txt
+73
View File
@@ -0,0 +1,73 @@
================================================================================================
CASE 013 | 3 Indian Bitcoin traders | March 14, 2017 | UAE
================================================================================================
DATABASE RECORD
id 13
date March 14, 2017
original_date March 14, 2017
year 2017
month 3
quarter 2017-Q1
victim 3 Indian Bitcoin traders
location Dubai, UAE
country UAE
scenario Authority Misuse
description 3 Emiratis pose as cops, kidnap victims and rob them of 25 BTC
kidnappings 1
violence_torture 0
drugs_alcohol 0
weapons 0
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports KhaleejTimes
notes coerced team through false authority claim
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** 3 Indian Bitcoin traders
**Attackers:** Perpetrators impersonating law enforcement
**Attack Method:** Authority Misuse - victim kidnapped
**Violence Used:** Threats/intimidation
**Crypto Stolen:** Approximately 25 BTC
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.khaleejtimes.com/uae/crime/3-fake-dubai-cops-kidnap-traders-to-rob-bitcoins
NOTES ON THIS FILE
* matched to sheet row 14: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source KhaleejTimes
URL https://www.khaleejtimes.com/uae/crime/3-fake-dubai-cops-kidnap-traders-to-rob-bitcoins
Origin reported_K&R sheet, row 14, column "Articles"
Length 2,434 chars
------------------------------------------------------------------------------------------------
3 'fake' Dubai cops kidnap traders to rob bitcoins
The trio was charged with kidnap, impersonation and online misappropriation of the virtual currency.
Three Emirati men were charged at the Dubai Court of First Instance on Monday for allegedly posing as cops and kidnapping three Indian traders to a desert location to rob 25 bitcoins from them. 
According to public prosecution records, the trio, aged 19, 27 and 20 (student), conned the victims into riding in their car after falsely claiming that they were being wanted by authorities for dealing in the virtual currency.
They then drove to a remote desert location off Al Barsha where they used the victims' laptop to transfer 25 bitcoins from their account into the account of one of them in Japan. The trio was charged with kidnap, impersonation and online misappropriation of the virtual currency.
They had four Indian accomplices, aged between 21 and 47. Those are accused of possessing Dh250,000, under circumstances suggesting that the money was ill-gotten.
The incident took place on March 14, 2017, and a case was registered at Al Barsha police station. 
A Yemeni woman, who works as a driver for one of the traders, recounted during the prosecution investigation, how she met the first Emirati defendant. "I worked with my sister for the traders. Many people of different nationalities would come to their villa to buy bitcoins. The 19-year-old accused contacted me and then met me and my sister at a restaurant."   
However, in the meeting, the accused told the sisters he is a security official and that the trader is being wanted in India in connection with forgery and fraud crimes. "He asked for our help, claiming we would get Dh500,000 as a reward for our cooperation. He also claimed we would land lucrative jobs for our help."
She stayed in contact with that defendant for some time to keep him posted about the trader's movements until the incident day.
One of the victims, a 35-year-old Indian investor, told the prosecutor that he was with the other two traders when a car intercepted them after 10pm. "The suspects pulled us out of the car and took our money and mobile phones."
The complainants were then taken to a remote spot where the suspects yelled at them that they were fraudsters and would be deported. One of their laptops was then used to transfer bitcoins to an account belonging to the 27-year-old defendant.
The trial continues on December 13.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 013
================================================================================================
merge-output/sources/014_Miyuki-Noda.txt
+121
View File
@@ -0,0 +1,121 @@
================================================================================================
CASE 014 | Miyuki Noda | June 17, 2017 | Japan
================================================================================================
DATABASE RECORD
id 14
date June 17, 2017
original_date June 17, 2017
year 2017
month 6
quarter 2017-Q2
victim Miyuki Noda
location Gifu, Japan
country Japan
scenario Malicious Invitation - SocialEng
description Woman strangled, attacker takes 100,000 yen worth of BTC
kidnappings 1
violence_torture 0
drugs_alcohol 0
weapons 0
theft 1
life_taken 1
money_wanted (null)
coin_type (null)
reports NewsJP Mainichi, Tokyo Reporter
notes conference lead
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Miyuki Noda
**Attackers:** Known associate(s) who betrayed victim
**Attack Method:** Malicious Invitation - SocialEng - victim kidnapped
**Violence Used:** Murder/homicide
**Crypto Stolen:** Amount not disclosed
**Status:** Victim deceased; investigation ongoing
LINKED SOURCES
[url] https://www.tokyoreporter.com/japan/nagoya/aichi-cops-accuse-pair-of-dumping-nagoya-womans-corpse-in-shiga/
NOTES ON THIS FILE
* matched to sheet row 15: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source NewsJP Mainichi, Tokyo Reporter
URL https://www.tokyoreporter.com/japan/nagoya/aichi-cops-accuse-pair-of-dumping-nagoya-womans-corpse-in-shiga/
Origin reported_K&R sheet, row 15, column "Articles"
Length 1,623 chars
------------------------------------------------------------------------------------------------
Bitcoin killing: Fresh charges of murder applied in death of Nagoya woman
Aug 21 (tokyoreporter.com) - Aichi Prefectural Police on Sunday applied fresh charges of murder and robbery to two persons in custody for allegedly dumping the body of a woman found buried in the mountains of Shiga Prefecture, a crime that could have been motivated by an attempt to gain the victim's virtual currency bitcoin , reports NHK
Police have accused Ichiya Nishida, a 20-year-old resident of Ogaki City, Gifu Prefecture, and an 18-year-old boy from Shiga, in the allegedly murder of Miyuki Noda, 53, whose body was found buried in a forested area of the town of Taga in late July.
Both suspects have declined to comment on the allegations.
According to a previous report, Nishida had met Noda, a resident of Nagoya, at a seminar about virtual currencies. On June 18, she disappeared following a different seminar in Kasugai City, Aichi. That night, she was seen boarding a vehicle registered to Nishida at JR Ogaki Station in Gifu.
On July 30, police found Noda's smartphone and bag during a search of the vehicle and residence of Nishida. The body of Noda was found buried the following day. Police then arrested the suspects on suspicion of abandoning the body of Noda.
Respiratory failure
The results of an autopsy revealed the cause of death of Noda to be respiratory failure brought about by pressure applied to the neck.
In early July, Nishida is believed to have posed as Noda online in obtaining the virtual currency bitcoin owned by her and valued at more than 100,000 yen. Police suspect that Noda was killed for financial gain.
------------------------------------------------------------------------------------------------
ARTICLE 2
Source NewsJP Mainichi, Tokyo Reporter
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 15, column "Article 2"
Length 1,867 chars
------------------------------------------------------------------------------------------------
Aichi cops accuse pair of dumping Nagoya woman’s corpse in Shiga
By Tokyo Reporter Staff on August 2, 2017
Ichiya Nishida
Aichi police have accused Ichiya Nishida of abandoning the body of a 53-year-old woman from Nagoya who went missing in June (TBS News)
SHIGA (TR) – Aichi Prefectural Police have accused two persons of abandoning the corpse of a missing woman from Nagoya in a mountainous area of Shiga Prefecture earlier this year, reports Nippon News Network (Aug. 1).
On around June 20, Ichiya Nishida, a 20-year-old resident of Ogaki City, Gifu Prefecture, and an 18-year-old boy from Shiga, allegedly buried the body of Miyuki Noda, 53, who went missing two days before, in a forested area of the town of Taga.
Nishida and the other suspect, who have been accused of abandoning a corpse, admit to the allegations. On Monday evening, a team of about 80 officers working off information provided by the suspects unearthed the body of Noda.
Virtual currencies
Nishida had previously met Noda at a seminar about virtual currencies, police said. Prior to his arrest, he had been undergoing voluntary questioning in the case. On Sunday, police found Noda’s smartphone and bag during a search of the vehicle and residence of Nishida.
Noda went missing following a seminar about selling food products and cosmetics over the internet, held on June 18 in Kasugai City, Aichi. After the event, she told participants that she was going to meet an acquaintance. That night, she was seen boarding a vehicle registered to Nishida at JR Ogaki Station in Gifu.
Body in bag
In carrying out the crime, the suspects are believed to have stuffed the body of Noda into a bag before carrying it to the forest in Taga. The corpse was buried using construction machinery, police said.
It is expected that murder and robbery charges will be applied to the suspects, police said.
------------------------------------------------------------------------------------------------
ARTICLE 3
Source NewsJP Mainichi, Tokyo Reporter
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 15, column "Article 3"
Length 3,004 chars
------------------------------------------------------------------------------------------------
Bitcoin murder: Nagoya woman likely killed on evening she went missing
By Tokyo Reporter Staff on August 4, 2017
Miyuki Noda
The body of Miyuki Noda as found buried in the mountains of the town of Taga on Monday (TBS News)
AICHI (TR) – Aichi Prefectural Police revealed on Thursday that a missing woman whose body was found buried in the mountains of Shiga Prefecture earlier this week was likely killed on the day she went missing in June, a crime possibly motivated by an attempt to gain the victim’s virtual currency bitcoin, reports the Chunichi Shimbun (Aug. 3).
On Tuesday, Ichiya Nishida, a 20-year-old resident of Ogaki City, Gifu Prefecture, and an 18-year-old boy from Shiga, were prosecuted for allegedly burying the body of Miyuki Noda, 53, in a forested area of the town of Taga.
On June 18, Noda disappeared following a seminar about selling food products and cosmetics over the internet in Kasugai City, Aichi. After the event, she told participants that she was going to meet an acquaintance. That night, she was seen boarding a vehicle registered to Nishida at JR Ogaki Station in Gifu.
In newly released information, messages to Noda’s Line account on her smartphone stopped being marked as “read” about two hours after she boarded the vehicle. As well, it is known that Nishida returned to Gifu the following morning without Noda. Police believe that she was killed shortly after she entered the vehicle.
Respiratory failure
According to a previous report, Nishida met Noda at a seminar about virtual currencies. Prior to his arrest, he had been undergoing voluntary questioning in the case. On Sunday, police found Noda’s smartphone and bag during a search of the vehicle and residence of Nishida. Her body was found buried in the mountains at a depth of between one and two meters on the following day.
The results of an autopsy revealed the cause of death of Noda to be respiratory failure brought about by pressure applied to the neck, police said.
Police expect to apply murder and robbery charges to the suspects.
Bitcoin
In early July, Nishida is believed to have posed as Noda online in obtaining the virtual currency bitcoin owned by her and valued at more than 100,000 yen. Police suspect that Noda was killed for financial gain.
According to Nikkan Sports (Aug. 2), Nishida told investigators that he was having financial trouble related to the virtual currency, whose value has fluctuated wildly in recent months.
According to the National Consumer Affairs Center of Japan, the number of victims targeted in get-rich-quick marketing schemes involving virtual currencies has exploded over the past three years.
The schemes typically recruit attendees by claiming to provide the know-how to boost an initial investment substantially over a short period through virtual currencies, such as bitcoin. Problems arise when the returns are not realized and since attendees recruit other members to attend in exchange for remuneration, making the operations akin to pyramid schemes.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 014
================================================================================================
merge-output/sources/015_Alexey-Sherstne.txt
+69
View File
@@ -0,0 +1,69 @@
================================================================================================
CASE 015 | Alexey Sherstne | September 4, 2017 | Ukraine
================================================================================================
DATABASE RECORD
id 15
date September 4, 2017
original_date September 4, 2017
year 2017
month 9
quarter 2017-Q3
victim Alexey Sherstne
location Kyiv, Ukraine
country Ukraine
scenario Malicious Invitation - SocialEng
description Man held and tortured for $50k in Bitcoins. He managed to send an SOS alert and take a picture of one of the attackers. They fled when they realized.
kidnappings 1
violence_torture 1
drugs_alcohol 0
weapons 1
theft 0
life_taken 0
money_wanted 10-12 BTC
coin_type BTC
reports Oboz
notes crypto consultation lead
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Alexey Sherstne
**Attackers:** Known associate(s) who betrayed victim
**Attack Method:** Malicious Invitation - SocialEng - victim kidnapped
**Violence Used:** Torture
**Crypto Stolen:** 10-12 BTC in BTC
**Status:** Suspects fled the scene
LINKED SOURCES
[url] https://www.obozrevatel.com/kiyany/crime/v-kieve-iz-parnya-vyibivali-bitcoin-na-summu-pochti-50-tyis-doll.htm
NOTES ON THIS FILE
* matched to sheet row 16: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Oboz
URL https://www.obozrevatel.com/kiyany/crime/v-kieve-iz-parnya-vyibivali-bitcoin-na-summu-pochti-50-tyis-doll.htm
Origin reported_K&R sheet, row 16, column "Articles"
Length 1,488 chars
------------------------------------------------------------------------------------------------
In Kyiv, a Man Was Forced to Hand Over Bitcoin Worth Nearly $50,000
In Kyiv, three men coerced Alexey Sherstnev, a cryptocurrency trader and consultant, into surrendering his Bitcoin holdings. Sherstnev shared the incident on his Facebook page, describing three hours of torture where the assailants demanded Bitcoin. The attackers, described as strong men, beat and threatened to kill him.
The incident took place on the evening of September 4 inside the Santa Muerte club on Yaroslaviv Val Street. Sherstnev was contacted by a man who asked to meet for a cryptocurrency consultation, claiming to know an investor interested in Bitcoin. The first meeting with this supposed investor occurred on August 25, where Sherstnev demonstrated how Bitcoin wallets and money transfers work. A second meeting was scheduled for September 4.
During the second meeting, three men threatened Sherstnev and demanded his phone and Bitcoin wallet password. When he tried to leave, they grabbed and beat him, taking his phone. The attackers held him in the bar for about three hours, demanding a transfer of 10-12 Bitcoins (roughly $44,000).
Cleverly, Sherstnev tricked the attackers into sending an SOS signal from his phone and even managed to photograph one of them. Realizing the alarm had been raised, the assailants fled. Sherstnev subsequently reported the crime to the police.
Previously, in Ukraine, an underground Bitcoin conversion center was reported to have embezzled 200 million hryvnias.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 015
================================================================================================
merge-output/sources/016_Jameson-Lopp.txt
+76
View File
@@ -0,0 +1,76 @@
================================================================================================
CASE 016 | Jameson Lopp | October 16, 2017 | USA
================================================================================================
DATABASE RECORD
id 16
date October 16, 2017
original_date October 16, 2017
year 2017
month 10
quarter 2017-Q4
victim Jameson Lopp
location Durham, North Carolina
country USA
scenario Swatting
description Bitcoin developer SWATted & extorted
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 1
theft 0
life_taken 0
money_wanted (null)
coin_type (null)
reports CBS17
notes (null)
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Jameson Lopp
**Attackers:** Unknown individual(s) through false police report
**Attack Method:** Swatting
**Violence Used:** Armed police response (false report)
**Crypto Stolen:** No theft completed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.cbs17.com/news/durham-man-says-enemies-called-911-to-report-false-hostage-situation/
NOTES ON THIS FILE
* matched to sheet row 17: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source CBS17
URL https://www.cbs17.com/news/durham-man-says-enemies-called-911-to-report-false-hostage-situation/
Origin reported_K&R sheet, row 17, column "Articles"
Length 2,092 chars
------------------------------------------------------------------------------------------------
Durham man says ‘enemies’ called 911 to report false hostage situation
News
by: Patrick Zarcone
A Durham man is claiming that he’s the latest victim of “swatting” after someone anonymously called police to report a false hostage situation at his home on Monday morning.
Police responded to the 1300 block of Whispering Oaks Lane in response to call about a hostage situation at one of the homes on the street. The call came in around 9 a.m., police said.
The 911 caller told dispatch he had already shot someone and was holding others hostage in the house.Listen to the 911 call at the top of this story
The caller also said he had explosives by the front door.
“By my voice, you can tell I’m not in a mental health state,” the caller said. “I’m all over the place. I don’t know what to do.”
The caller then began to make demands.
“If I don’t get $60,000, I’m going to blow the whole (expletive) block up,” the caller said. “If I see any police coming toward the front door who aren’t handling a bag full of money, I’ll shoot them on sight.”
The caller also tells the dispatcher he shot the victim 15 times with an assault rifle.
Authorities staged nearby on Cardinal Lake Drive while they worked to determine what was happening.
Police, EMS, a mobile command truck and armed officers in bulletproof vests were all at the scene. When authorities approached the home, the owner came out and told them that the call was false and that they never made any call to police and there was no hostage situation at the home.
Homeowner Jameson Lopp told CBS North Carolina that he works for a software company and has made several online, anonymous “enemies” and that he believes one of them was getting “revenge.”
“I am not intimated by this. This is actually, from my perspective evidence that the people who want to do this do not have the guts to say anything to my face. They don’t have the guts to come here and actually tell me what their problem is with me,” said Lopp.
Durham police have not confirmed this to be a swatting case. At last check, police have not been able to track the caller.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 016
================================================================================================
merge-output/sources/018_Multiple-victims.txt
+108
View File
@@ -0,0 +1,108 @@
================================================================================================
CASE 018 | Multiple victims | October, 2017 | USA
================================================================================================
DATABASE RECORD
id 18
date October, 2017
original_date October, 2017
year 2017
month 10
quarter 2017-Q4
victim Multiple victims
location Los Angeles, California
country USA
scenario Armed Robbery in Public Space
description "Discount Bitcoin Bandits" committed 5 robberies at gunpoint
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 1
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports Lacounty.gov
notes online ads of "discounted bitcoin"
has_processed_date 0
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Multiple victims
**Attackers:** Unknown number of perpetrators
**Attack Method:** Armed Robbery in Public Space
**Violence Used:** Firearms
**Crypto Stolen:** Amount not disclosed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://da.lacounty.gov/sites/default/files/press/042618_Discount_Bitcoin_Bandits_Charged_with_Robbing_Would-Be_Buyers.pdf
NOTES ON THIS FILE
* matched to sheet row 19: reviewed and approved individually
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Lacounty.gov
URL https://da.lacounty.gov/sites/default/files/press/042618_Discount_Bitcoin_Bandits_Charged_with_Robbing_Would-Be_Buyers.pdf
Origin reported_K&R sheet, row 19, column "Articles"
Length 1,636 chars
------------------------------------------------------------------------------------------------
‘Discount Bitcoin Bandits’ Plead to Robbery of Would-Be Buyers
Two East Hollywood residents known as the “Discount Bitcoin Bandits” have admitted to robbing people who sought to buy the cryptocurrency in 2017 and 2018, the Los Angeles County District Attorney’s Office announced today.
Precious Lanay Fitzgerald, 29, pleaded no contest today to one count of second-degree robbery and admitted allegations that a handgun was used during the crime and she had a prior felony conviction.
Her co-defendant, Lawillie Joshua Hall, 23, pleaded no contest on April 2 to one felony count of second-degree robbery and admitted an allegation that he was in possession of a handgun.
Fitzgerald is expected to be sentenced to 10 years in state prison and ordered to pay $85,715 in restitution under the terms of a negotiated plea agreement. Her sentencing is scheduled on Nov. 22 in Department 121 of the Foltz Criminal Justice Center.
Hall is expected to be sentenced to four years in state prison and ordered to pay $29,900 in restitution. His sentencing is on Dec. 17 in Department 121.
Deputy District Attorney John Weller of the Cyber Crime Division prosecuted case BA466388.
From October 2017 through February 2018, Fitzgerald stole money from five people by using online notices and communications advertising the sale of discount bitcoins, according to court testimony. She met the victims in person and forcefully took the cash they had brought to purchase the cryptocurrency.
Hall helped Fitzgerald in two of the robberies, according to testimony.
The case was investigated by the Los Angeles Police Department, Robbery-Homicide Division.
------------------------------------------------------------------------------------------------
ARTICLE 2
Source Lacounty.gov
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 19, column "Article 2"
Length 2,254 chars
------------------------------------------------------------------------------------------------
‘Discount Bitcoin Bandits’ Charged
with Robbing Would-Be Buyers
A man and woman dubbed the “Discount Bitcoin Bandits” have been charged with stealing thousands
of dollars from people who sought to buy the cryptocurrency, the Los Angeles County District
Attorney’s Office announced today.
Precious Lanay Fitzgerald (dob 6/29/90) was initially charged with four counts of second-degree
robbery, two counts of child abuse and one count of grand theft, all felonies, on March 19. Two new
charges, one felony count each of grand theft and child abuse, were filed yesterday against her,
according to the amended complaint in case BA466388.
Lawillie Joshua Hall (dob 4/2/96) was charged March 19 with two counts of second-degree robbery.
Both defendants also face gun allegations, and the charges include prior conviction allegations against
Fitzgerald.
The pair is scheduled for a preliminary hearing setting on Wednesday, when they are expected to be rearraigned on the amended complaint, in Department 30 of the Foltz Criminal Justice Center.
Prosecutors are recommending bail be set at $570,000 for Fitzgerald and $200,000 for Hall.
According to prosecutors, the defendants allegedly stole $87,125 from six people from October to
February by using online notices and communications advertising the sale of discount Bitcoins then
stealing the victims’ payments.
In one instance, Fitzgerald is accused of receiving a money transfer from a victim but never providing
the promised Bitcoin. In other instances, she allegedly met the victims in person and forcefully took the
cash they had brought to purchase the Bitcoins.
Hall allegedly helped Fitzgerald in at least two of the robberies and used a handgun. An infant also
allegedly was present during some of the robberies.
N E W S R E L E A S E
Fitzgerald was convicted March 22, 2010, of assault with a deadly weapon other than a firearm in case
YA075924.
She faces a maximum possible sentence of 29 years and 18 months in state prison if convicted as
charged. Hall faces up to 19 years and four months in prison.
Deputy District Attorney John C. Weller of the Cyber Crime Division is prosecuting the case.
The case remains under investigation by the Los Angeles Police Department, Robbery-Homicide
Division.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 018
================================================================================================
merge-output/sources/019_Unidentified.txt
+141
View File
@@ -0,0 +1,141 @@
================================================================================================
CASE 019 | Unidentified | November 4, 2017 | USA
================================================================================================
DATABASE RECORD
id 19
date November 4, 2017
original_date November 4, 2017
year 2017
month 11
quarter 2017-Q4
victim Unidentified
location New York, New York
country USA
scenario Kidnapping
description Man robbed of $1.8M of ETH
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 0
theft 0
life_taken 0
money_wanted $1.8 million
coin_type ETH
reports NY Post, NY Post, Coingeek
notes his "friend" betrayed him
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Unidentified
**Attackers:** Unknown number of perpetrators
**Attack Method:** Kidnapping
**Violence Used:** Threats/intimidation
**Crypto Stolen:** $1.8 million in ETH
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://nypost.com/2018/06/12/trio-of-crooks-busted-in-1-8m-cryptocurrency-heist/
NOTES ON THIS FILE
* matched to sheet row 20: exact date + country, unique candidate
------------------------------------------------------------------------------------------------
ARTICLE 1
Source NY Post, NY Post, Coingeek
URL https://nypost.com/2018/06/12/trio-of-crooks-busted-in-1-8m-cryptocurrency-heist/
Origin reported_K&R sheet, row 20, column "Articles"
Length 3,084 chars
------------------------------------------------------------------------------------------------
Three men charged in $2M cryptocurrency kidnapping and robbery
By Shayna Jacobs and Janon Fisher
Jun 12, 2018 | 11:05 PM
Three men charged in $2M cryptocurrency kidnapping. Cryptocurrency heist suspects were arraigned in Manhattan court Tuesday.
MEMBERS OF a Bronx biker gang, one sporting a skull tattoo, kidnapped a friend and robbed him of nearly $2 million in cryptocurrency, Manhattan prosecutors charged Tuesday.
Cesar (Fuego) Guzman, 38, a paraprofessional with the Department of Education, Allan (Joker) Nunez, 36, and Darrell (Bishop) Colon, 37, joined Louis Meza, 35, to lure the cyber-millionaire victim into a minivan posing as a livery car on Nov. 4, 2017.
Meza, of Jersey City, who originally set up the victim, his buddy, by getting him to get into the fake Uber was arrested and charged last December.
Each of the men played a role in the heist.
Colon was hiding in the rear row of seats and popped out with what appeared to be a gun to threaten the victim for his Ether — a type of virtual money, prosecutors said.
Nunez drove the victim around for two hours at gunpoint until he coughed up the location of his 24-word passphrase. Meza, who was caught on surveillance camera, and Guzman, whose head is inked with tribal tats, broke into victim’s apartment where they nabbed his digital wallet and stole $1.8 million, prosecutor James Vinocur said at the men’s arraignment in Manhattan Supreme Court.
“The investigation revealed that Mr. Guzman recruited both of these individuals based on their shared involvement in a Bronx motorcycle crew or group,” Vinocur said.
Most of the stolen digital dollars were recovered, prosecutors said.
The chunky trio may not seem like high-tech hoods, but Manhattan District Attorney Cy Vance Jr. said everyone is getting clepto around crypto.
Cryptocurrency heist suspects (from left) Allan Nunez, Darrell Colon and Cezar Guzman are arraigned in Manhattan court Tuesday.
Cryptocurrency heist suspects (from left) Allan Nunez, Darrell Colon and Cezar Guzman are arraigned in Manhattan court Tuesday. (Alec Tabak / for New York Daily News)
“Investors aren’t the only ones tracking the fluctuating values of digital currencies — everyone from sophisticated cybercriminals to old-school shakedown-and-stick-up scammers are keeping a close eye, too,” Vance said.
Nunez’s attorney told the judge that City Councilman Ritchie Torres penned a letter on his client’s behalf attesting to his good character and the charity work he does for his community in the Bronx.
The attorney, Rob Georges, also argued that his client should get relatively minimal bail considering that fallen film producer Harvey Weinstein, another defendant in Manhattan, posted $1 million cash, which is just a fraction of his reported worth.
“And he’s not suspected of being nearly as violent,” Georges argued.
The three men pleaded not guilty in front of Justice Melissa Jackson.
Guzman’s attorney said that in addition to working for the Education Department, his client attends night classes at Lehman College.
Each of the men was held on at least $50,000 bail.
------------------------------------------------------------------------------------------------
ARTICLE 2
Source NY Post, NY Post, Coingeek
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 20, column "Article 2"
Length 1,171 chars
------------------------------------------------------------------------------------------------
Man admits to $1.8M crypto heist, gets 10 years in prison
By Rebecca Rosenberg
Published Sep. 5, 2018, 7:50 p.m. ET
The mastermind of a $1.8 million cryptocurrency heist admitted to the robbery Wednesday in exchange for a decade in prison.
Louis Meza, 35, copped to first-degree grand larceny and second-degree kidnapping in Manhattan Supreme Court and is expected to be sentenced on Sept. 27 to 10 years behind bars and five years of post-release supervision.
“Louis Meza orchestrated a 21st-century stick-up,” said Manhattan District Attorney Cyrus Vance Jr. in statement. “Then 21st-century investigators brought him swiftly to justice, securing a landmark conviction in an undeveloped area of the law.”
Meza — along with the help of three co-defendants whose cases are still pending — hatched the Nov. 4, 2017, scheme.
The men held the unnamed victim captive in a van for two hours while they stole his memory stick and used it to move the Ether currency into an account they controlled.
The cyber crooks allegedly pointed a BB gun at the victim and covered his head with a hood, but the shaken man broke free and was able to call 911, according to prosecutors.
------------------------------------------------------------------------------------------------
ARTICLE 3
Source NY Post, NY Post, Coingeek
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 20, column "Article 3"
Length 2,000 chars
------------------------------------------------------------------------------------------------
Trio of crooks busted in $1.8M cryptocurrency heist
By Rebecca Rosenberg
Three cyber crooks — including a church worker and a city Education Department staffer — were busted Tuesday for an elaborate $1.8 million cryptocurrency heist, authorities said.
The Nov. 4, 2017, scheme allegedly was orchestrated by Louis Meza, 35, who was arrested last December for the robbery.
He set up a meeting with the unnamed victim, then pretended to order an Uber to take him home, prosecutors said.
Allan Nunez, 36, allegedly posed as the Uber driver, while Darrell Colon hid in the back of the minivan. When the victim stepped in, Colon pulled a gun and demanded his keys and a memory stick associated with his Ether currency account, court papers charge.
“I stuck the gun in the guy’s ribs and took his stuff,” Colon, who said the weapon was a BB gun, allegedly confessed to investigators.
The frightened victim was held captive inside the van for two hours with a hood over his head before escaping, Assistant District Attorney James Vinocur said Tuesday in Manhattan Supreme Court.
“The victim was able to run, terrified, for two blocks until he was able to reach a grocery store and call 911,” the prosecutor said.
Meza allegedly had enlisted his pal, Cesar Guzman, who works as a DOE paraprofessional, to help plan the robbery.
Officials said Guzman, 38, recruited Nunez, a church worker, and Colon from his motorcycle club.
While the victim was trapped inside the van, Meza and Guzman broke into his house.
Meza, who was caught on surveillance video leaving the victim’s home with a black box, used the stolen data to move the cyber funds into his personal account.
Authorities said they recovered most of the currency.
Defense lawyer Michael Barsky argued that Guzman, who runs a neighborhood charity and cares for his autistic nephew, should be granted reasonable bail.
Attorney Rob Georges made a similar pitch for Nunez, then invoked the sex-assault case against movie mogul Harvey Weinstein.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 019
================================================================================================
merge-output/sources/020_Unidentified.txt
+65
View File
@@ -0,0 +1,65 @@
================================================================================================
CASE 020 | Unidentified | November 15, 2017 | Turkey
================================================================================================
DATABASE RECORD
id 20
date November 15, 2017
original_date November 15, 2017
year 2017
month 11
quarter 2017-Q4
victim Unidentified
location Istanbul, Turkey
country Turkey
scenario Authority Misuse
description Gang stole $2.83M in BTC from businessman
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 1
theft 1
life_taken 0
money_wanted $2.83M
coin_type BTC
reports Daily Sabah
notes 5 people posing as policemen
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Unidentified
**Attackers:** Gang/organized group
**Attack Method:** Authority Misuse
**Violence Used:** Threats/intimidation
**Crypto Stolen:** $2.83M in BTC
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.dailysabah.com/investigations/2017/11/15/turkish-police-detain-gang-who-stole-bitcoins-worth-283m
NOTES ON THIS FILE
* matched to sheet row 21: exact date + country, unique candidate
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Daily Sabah
URL https://www.dailysabah.com/investigations/2017/11/15/turkish-police-detain-gang-who-stole-bitcoins-worth-283m
Origin reported_K&R sheet, row 21, column "Articles"
Length 788 chars
------------------------------------------------------------------------------------------------
Turkish police detain gang who stole bitcoins worth $2.83M
According to reports, the gang, consisting of five people, posed as police and stopped the businessman's car and forced him to give out his passwords of online banking accounts at gunpoint.
The businessman reportedly contacted the police following the incident and filed a criminal complaint and police were able to find the whereabouts of gang members after examination of security cameras around the area.
One of the suspects was reportedly jailed for extortion but had fled, while another suspect proposed to his girlfriend in an extravagant ceremony at a luxurious restaurant in Istanbul.
Police investigation revealed that the suspects had also stolen bitcoin mining devices from three different people in Esenler district.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 020
================================================================================================
merge-output/sources/021_Unidentified.txt
+156
View File
@@ -0,0 +1,156 @@
================================================================================================
CASE 021 | Unidentified | December, 2017 | Iceland
================================================================================================
DATABASE RECORD
id 21
date December, 2017
original_date December, 2017
year 2017
month 12
quarter 2017-Q4
victim Unidentified
location Reykjavik, Iceland
country Iceland
scenario Armed Robbery in Public Space
description 600 Bitcoin ASICs stolen and Follow-up Story
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 0
theft 1
life_taken 0
money_wanted 600
coin_type mining machines
reports Yahoo
notes befriended security guard to steal 600 asics. wearing jackets from the security company as to not appear out of place. They used the security codes to get inside, and worked extremely quickly. In a matter of a few hours and lots of heavy lifting, around 600 high powered crypto mining computers had been loaded into a truck by hand
has_processed_date 0
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Unidentified
**Attackers:** Unknown number of perpetrators
**Attack Method:** Armed Robbery in Public Space
**Violence Used:** Threats/intimidation
**Crypto Stolen:** 600 in mining machines
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://finance.yahoo.com/news/bitcoin-heist-iceland-115114815.html
NOTES ON THIS FILE
* matched to sheet row 22: reviewed and approved individually
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Yahoo
URL https://finance.yahoo.com/news/bitcoin-heist-iceland-115114815.html
Origin reported_K&R sheet, row 22, column "Articles"
Length 19,524 chars
------------------------------------------------------------------------------------------------
This man stole 600 bitcoin mining computers and then walked out of his jail cell
Alexander Sugg · Senior Producer
Updated September 4, 2019
Listen : Apple Podcasts | Google Podcasts
In January 2018, over 600 computers valued at $2 million were stolen from a bitcoin mining facility in Reykjavik, Iceland.
That night was only the beginning of the biggest heist in the country’s history. What followed were prison breaks, deception, and an attempt at a perfect crime.
The mastermind behind the crime was Sindri Stefansson, a man about 30 years old who had a history of burglary and drug possession. He’d found work as a web designer and other odd jobs to get by, but his appetite for wealth had always been difficult to suppress. He wanted big money and a big lifestyle.
The Art Of The Exit by Yahoo Finance is a true crime podcast that goes inside the most notorious heists in history. Listen here, and subscribe for a new episode coming next week.
This Oct. 15, 2014 photo made available by The Reykjavík Metropolitan Police shows Sindri Thor Stefansson. Icelandic police have informed their Swedish colleagues that a man suspected of masterminding the theft of about 600 computers used to mine bitcoins and other virtual currencies, likely fled to Sweden after a prison break, officials said Wednesday April 18, 2018. (Credi: The Reykjavík Metropolitan Police via AP)
This Oct. 15, 2014 photo made available by The Reykjavík Metropolitan Police shows Sindri Thor Stefansson. (Photo: The Reykjavík Metropolitan Police via AP)
‘Sindri ... has always been kind of a thrill seeker’
"Sindri, the mastermind in the crime, is a guy who has always been kind of a thrill seeker,” Egill Bjarnason, a reporter based in Iceland who covered the case, told Yahoo Finance. “It seems like he had this gravity towards maybe making big money. When he got wind of there being built bitcoin mines all around the country, he thought he wanted to get a share of that.”
Cryptocurrency and Iceland are a perfect fit for each other. Because of the climate and cost of energy, Iceland has become a leader in the business of crypto, and offers a lot of incentive for the industry.
The country has built data centers with partial walls on a former World War Two British airstrip to catch the high winds, and those centers are cooled constantly by fans surrounding the equipment. Basically, it's a giant warehouse with computers stacked on computers all the way up to the high ceiling sitting right in the center of a vast Icelandic landscape.
In this photo taken on January 17, 2018, inside the Genesis Mining cryptocurrency mine in Iceland, a man walks along a row of computer rigs that run around the clock 'mining' bitcoin. At the edge of the Arctic, bitcoin miners seek natural cooling and competitive prices for Icelandâ_x0080__x0099_s abundance of renewable energy. (AP Photos/Egill Bjarnason)
In this photo taken on January 17, 2018, inside the Genesis Mining cryptocurrency mine in Iceland, a man walks along a row of computer rigs that run around the clock 'mining' bitcoin. (Photo: AP Photos/Egill Bjarnason)
‘I'm almost sure that the computers are working on their behalf’
Three months after the heist, Sindri was caught.
"He was in custody,” Bjarnason said. "He hadn't been charged yet, but he was still in custody. He was staying at a low security prison. We have what to the U.S. audiences sounds strange, which is called an open prison where the prisoner has pretty much the key to his own cell.”
Icelandic prisons can be low security for petty crimes — so much so that criminals can literally walk out of their cells.
“He ran away, and he booked the ticket in the middle of the night and left the country, and was on the run until arrested in Amsterdam where he was eventually captured” in late April 2018, Bjarnason said.
The twist of this story: Are those computers hidden somewhere, mining crypto while he’s serving his sentence?
“I'm almost sure that the computers are working on their behalf while they serve time,” Bjarnason said.
If these stolen computers are mining crypto all the time he’s serving in prison, it would be a near perfect crime: Steal something that passively generates money while sitting in prison for stealing it.
Listen to the Art Of The Exit on Apple Podcasts or Google Podcasts today.
Read the transcript below
Alex Sugg: (00:01) In January of 2018, over 600 computers valued at $2 million were stolen from a Bitcoin mining facility in Reykjavik, Iceland. The mastermind behind the crime is named Sindri Stefansson, who was joined by six other accomplices. That night was only the beginning of this heist. What followed were prison breaks, deception, and what could be considered the perfect crime. This is the story of the Bitcoin Heist of Iceland. From Yahoo Finance, this is The Art of the Exit. I'm Alex Sugg.
It's no secret that Bitcoin and other cryptocurrency have been discussed a lot in the past few years. In December of 2017, a single Bitcoin was valued nearly at $20,000 at its all time high. Since that peak, the value has dropped significantly, and it's fluctuated a lot, leaving many to debate the legitimacy and longterm value of the currency as a whole.
AS: (01:16) We'll get to that in a bit, but first, let's get into the story. In Reykjavik, Iceland in December of 2017, we meet Sindri Stefansson, a man with a history of burglary and drug possession. He's been clean for a while. He found work as a web designer, and other odd jobs to get by. He has a family now. Even so, his appetite for wealth had always been difficult to suppress. He wanted big money and a big lifestyle. Cryptocurrency and Iceland are a perfect fit for each other. The country's climate and cheap energy costs are an ideal location for the industry, and we've seen a steady stream of crypto companies migrating to Iceland over the past few years. Sindri noticed the trend, saw what Bitcoin was going for in the market, and he knew he had to get in. Sindri began scoping the facilities these companies were moving in, and then he got to planning.
Alex Sugg: (02:29) Sindri put together a gang of accomplices, and they organized three heists that were planned out to the detail. The final heist is where most of the loot came from, so that is the crime we will focus on in this story. They were meticulous in their planning of the crime, but they weren’t as attentive while actually executing, leaving many traces behind which would eventually contribute to them getting busted. Even so, these were still pretty sophisticated thefts.
For the heist, they knew they needed to be extra careful because it was going to be much larger than the 2 previous heists had been. The facility was in a much more protected area than they were used to, along with their target being much bigger on this heist. But they had a plan - and it all rested on the shoulders of one security guard who they befriended. This guard knew all the codes, knew where the cameras were, and all the best ways in and out of the facility. After some heavy recruiting, they eventually convinced him to collaborate and help them break in. This was the key to their success. By the time they were ready to strike, they were all wearing jackets from the security company as to not appear out of place. They used the security codes to get inside, and worked extremely quickly. In a matter of a few hours and lots of heavy lifting, around 600 high powered crypto mining computers had been loaded into a truck by hand. They shut the door, and drove off - taking their gold mine to a safe location without getting caught.
Alex Sugg: (04:04) So you may be wondering like I did when I was first researching this story, why exactly does all of this matter? Why wouldn't Sindri in his crew simply steal something else with a little bit more of an immediate payoff? Cryptocurrency is a bit of a mystery to the average person. To most, it's a trendy financial term we've been hearing for a few years, but what exactly is it, and how exactly does it work?
Dan Roberts: (04:28) Well, the way I describe it in its most simplest terms is that it's a digital payment system, and even over the years as things have changed, and people have different conceptions about the industry, that's a pretty accurate description. It's a peer to peer electronic cash system.
AS: (04:59) This is Dan Roberts, my colleague at Yahoo Finance who's been covering cryptocurrency in detail since 2011. He's been watching the space closely from the very beginning.
DR: (05:08) ... cryptocurrency meaning you can't touch it, you can't physically hold Bitcoins. Side note, that's why it's funny when news articles about Bitcoin always use stock images of gold coins.
AS: (05:17) Oh yeah gold coins. Maybe talk to me a little bit about what was the conversation? What was happening at the peak? What was going on then?
DR: (05:26) Yeah. I think that the best little anecdote, and so many people had a shared experience where this occurred, I was talking to a venture capitalist about investing in certain tech companies, and he said to me, “Well, one good rule of thumb is I know that when my Uber driver is asking me about it not to invest in it.” He said, “So when Uber drivers are saying, 'Oh, do you do crypto and Bitcoin'”, he said, “I'm staying away.” Yeah, December, 2017 I think a lot of things came to a head at once. You started to see more stories about institutions and banks being interested in Blockchain. You also just saw general positive sentiment, more and more people being curious and educating themselves about it, but for a long time there when Bitcoin would go up, everything else would go up. They were all tethered to each other.
So a rising tide lifts all boats. So all at once toward the end of 2017, all of the biggest cryptocurrencies were soaring at once. Of course, price begets price actions. So the more that it Rose, the more newbies who really knew nothing and weren't caring about educating themselves about crypto, they didn't care about the technology, they wanted to rush in. Then you had people like Jamie Dimon, Warren Buffett coming out and saying, “Stay away. It's a bubble. It's a scam.” I actually think that that stoked the price even more, and that there were people saying, “Oh, now's the time to get in” because the people who've been in this industry involved in it, either working at companies, building things, or just investing it in, pumping it on social media, these people who are such big believers, originally the whole appeal was that it was outside government regulation, that it wasn't fiat currency, that it was libertarian.
DR: (06:56) A lot of the original big names in this space are libertarians. So I think that when they saw big names in mainstream finance and Wall Street trashing Bitcoin, they liked that, and they said, “This is good. We like it even more now.” So I think everything just kind of came to a head. You knew that it couldn't last forever, but it went up, up, up, and then everything kind of popped. Back in 2017, another funny thing that happened was a lot of people who didn't understand the space before, but they saw that the price was going up like crazy, a lot of young people unfortunately they rushed in, bought a lot of Bitcoin or other cryptocurrencies, and then in 2018 when the price started to fall back down to earth, they dumped in a rush, and that's never how you should invest anyway.
So there are a lot of people who bought high and sold low, pretty much the opposite of what you're supposed to do with investing. It's because they rushed in and of course, A, what they should've done is not sold and not panicked when the price started to drop and held on. But also pull back even further, they probably never should have bought in the first place. They certainly shouldn't have rushed in when they saw that the price was at 17,000, and it was soaring because the top could have been anywhere, and then sure enough it came pretty soon. So there are people who they only ended up owning Bitcoin, or Ether, or Ripple, or Bitcoin Cash for three months, and they lost money, and that's just not how you invest, and that's a shame. A lot of people I think lost their shirts among the hype.
Alex Sugg: ( 08:21) After the break, we'll hear how Sindri escapes prison, and how after all its ups and downs, this may have been the perfect crime. Because of the climate and cost of energy, Iceland has become a leader in the crypto industry's growth, and offers a lot of incentive for the business of crypto. Originally, they wanted to get the Facebooks and the Googles to move data centers there, but didn't have much luck. Crypto mining was a different story, and they've had a lot of success since embracing this new industry. They've built data centers with partial walls on a former of World War two British air strip to catch the high winds and are cooled constantly by fans surrounding the equipment. Basically, it's a giant warehouse with computers stacked on computers all the way up to the high ceiling sitting right in the center of a vast Icelandic landscape.
AS: (09:40) Iceland is a small country. There are only 340,000 residents in the entire nation. For perspective, that is less than the entire city of Honolulu, Hawaii that reside in this one country. The police don't carry guns, and there is no formal military. For reasons like this, Iceland is considered by many to be the safest country in the world. Crime is incredibly sparse, and people tend to trust each other. Things like hitchhiking are common there. The relaxed culture of Iceland turned into a really nice asset for Sindri to exploit.
AS: (9:58) I spoke to Egill Bjanason a reporter based in Iceland who covered the story,They got caught, or at least he did, and he went to prison, and then he escaped from prison. It's like-
Egill Bjarnason: (10:29) Yeah.
Alex Sugg: (10:29) ... oh, generally, they get caught, they're awaiting their sentence, they're in jail, and then kind of end of story. Not him, he went to jail and then escaped prison. So can you explain what happened there?
EB: (10:39) He was in custody. He was arrested few months after the last heist. The police had narrowed it all down to him. He hadn't been charged yet, but he was still in custody, and had been in custody for quite some time. He was staying at a low security prison. We have what to the US audiences sounds strange, which is called an open prison where the prisoner has pretty much the key to his own cell, but still everything is locked up during the night, and they can't leave the premise. But he ran away, and he booked the ticket in the middle of the night and left the country, and was on the run until arrested in Amsterdam.
AS: (11:25) Explain that, that a prisoner would have the key to his own cell in an Icelandic prison. Explain that to me.
EB: (11:34) Usually these are for prisoners that have behaved well, or are in jail for crimes that are not violent or petty. They live in a prison that is usually in a rural setting. The idea is too by giving them a little bit more freedom, they learn to become more responsible, and they're allowed to have a lot more comfort than you're used to in a prison. They have a TV in their cell, and the cell is more just like a room. They're allowed to see the children or their wives much more frequently. It's no luxury because it's prison, but it's still a lot different from being in a cell.
AS: (12:19) Is it proven in Iceland to that these types of settings encourage good behavior long term? You know, I think that's fascinating. If so, like you said, you almost earn trust, you earn responsibility, you earn more of what it means to be a responsible adult in the real world within the prison walls. It must be a proven system in Iceland to work, right?
EB: (12:43) Yeah. Prisoners are less likely to relapse if they have this sort of cushion to go back into the real life because these prisons prepare them more for the responsibilities of being in the real world as opposed to just throw them on the street when they've done their sentence and having them figure things out on their own. It's kind of something that kind of comes in between. What fascinated me about this story is where are the computers? The police has spent enormous resources, hours looking for the computers. They've looked through all the electric usage in the entire country just to see if there's any kind of unusual usage in a tiny home, or a remote farm, and they've raided a few places, but they never found the computers. The computers are somewhere probably plugged into power creating a crypted coin, creating a Bitcoin or other crypto currency, which is untraceable currency, so making money for the guys who have been sentenced, but in a way, they got away with the perfect crime because they stole things that create value without having to sell it again.
EB: (14:19) I'm almost sure that the computers are working on their behalf while they serve time because otherwise they would have given them up. They instead didn't give them up, and were sentenced to pay these companies quite a lot of money in damages, but probably they've made all that money already from just having those computers mine Bitcoin when Bitcoin was incredibly valuable.
AS: (14:50) What strikes me about this heist is that despite the countless searches and resources being poured into finding the stolen computers, nothing has been found. They've tracked energy use across the country, and chased a bunch of other leads that never got anywhere. Eagle believes that these 600 computers are set up somewhere mining crypto, and I don't think he's wrong. After Sindri is released, and these computers have been running for their entire sentence, they'll have a pile of cash waiting on the other side. It's pretty genius really, steal something that generates money while you're in jail for stealing it. When Sindri escaped prison and boarded a plane to Stockholm, he was greeted with a little surprise. There was a familiar face on the plane. As he began walking to his seat, he notices the Prime Minister of Iceland was flying business class only a few rows away from him.
AS: (15:46) That had to have been a little uncomfortable having just escaped prison, you're at large for millions of dollars, and now you have to sit by the most heavily guarded and high profile person in your country. Sometimes funny coincidence happens, but this one probably wasn't very funny to Sindri. He got through the flight unnoticed, but was caught shortly after landing in Stockholm. He is currently serving his sentence, and I imagine security is a little tighter on a cell this time. He might have the last laugh though because while he's behind bars, there's a very good chance he'll come out a much richer man on the other side of his sentence, talk about passive income.
AS: (16:41) The Art of the Exit is produced by Yahoo Finance at our studios in New York City. This episode was written, edited, and produced by me, Alex Sugg. Thank you to Eagle Barnasan for your time and contributing to this episode. Also, a big thank you to my colleague, Dan Roberts for your contribution, and for schooling us all on the basics of crypto. If you enjoyed this episode, please head over to Apple Podcast and leave us a five star rating and review there, and share the story with your friends. We'll be back soon with another new episode. So until then, thank you for listening to the Art of the Exit.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 021
================================================================================================
merge-output/sources/022_Pavel-Lerner.txt
+109
View File
@@ -0,0 +1,109 @@
================================================================================================
CASE 022 | Pavel Lerner | December 26, 2017 | Ukraine
================================================================================================
DATABASE RECORD
id 22
date December 26, 2017
original_date December 26, 2017
year 2017
month 12
quarter 2017-Q4
victim Pavel Lerner
location Kyiv, Ukraine
country Ukraine
scenario Kidnapping
description Bitcoin exchange owner kidnapped & ransomed
kidnappings 1
violence_torture 0
drugs_alcohol 0
weapons 0
theft 1
life_taken 0
money_wanted $1 million
coin_type BTC
reports BBC
notes they abducted him while leaving his office with a minivan and requested ransom
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Pavel Lerner
**Attackers:** Unknown number of perpetrators
**Attack Method:** Kidnapping for ransom
**Violence Used:** Threats/intimidation
**Crypto Stolen:** $1 million in BTC
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.bbc.com/news/business-42505261
NOTES ON THIS FILE
* matched to sheet row 23: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source BBC
URL https://www.bbc.com/news/business-42505261
Origin reported_K&R sheet, row 23, column "Articles"
Length 2,216 chars
------------------------------------------------------------------------------------------------
Ukraine kidnappers free bitcoin analyst after $1 mln ransom paid
Pavel Polityuk
KIEV (Reuters) - Kidnappers in Ukraine have released an employee at a United Kingdom-registered cryptocurrency exchange after getting more than $1 million in bitcoins as ransom, an adviser to the Ukrainian interior minister told Reuters on Friday.
Pavel Lerner, a leading analyst and blockchain expert, was abducted by unknown masked people on Dec. 26, according to a statement by his company, EXMO Finance, on its website.
“This is the first such case in Ukraine linked to bitcoins,” Anton Gerashchenko, an adviser to Interior Minister Arsen Avakov, said in a phone text message.
It was unclear who paid the ransom. Lerner’s work at EXMO did not involve access to the financial assets of its users, the company said, adding that the platform was operating normally.
“At the moment, he is safe, and there was no physical harm inflicted on him,” the statement said. “Nevertheless, Pavel is currently in a state of major stress, therefore, he will not provide any official comments in the coming days.”
News of the release came as bitcoin and other cryptocurrencies rebounded after two days of losses partly related to regulators toughening rules on digital currencies in an effort to curb excessive speculation. Many digital currencies surged in value this year.
BALACLAVAS
Strana.ua, a local news website, had earlier reported that six gun-toting men in dark clothing and balaclavas had snatched Lerner and pushed him into a minibus with stolen number plates.
Kiev police have begun a criminal investigation after a man was kidnapped in the Obolon district of Kiev, Oksana Blyshchyk, the Kiev police spokeswoman, said by phone without revealing the name of the victim.
EXMO has 900,000 users as of December 2017, according to its website.
“We would like to note that the story of Pavel’s abduction has overgrown with rumors that might tamper with the official investigation,” EXMO said in its statement. “That said, EXMO currently refrains from any comments or suggestions of own versions of the possible scenario, in the nearest future.”
Separately, the company announced on Thursday that it had been hit by a denial-of-service attack.
------------------------------------------------------------------------------------------------
ARTICLE 2
Source BBC
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 23, column "Article 2"
Length 1,509 chars
------------------------------------------------------------------------------------------------
Exmo Bitcoin exchange manager kidnapped in Kiev
28 December 2017
A manager of the Exmo Bitcoin exchange has been kidnapped in Ukraine.
According to Russian and Ukrainian media reports Pavel Lerner, 40, was kidnapped while leaving his office in Kiev's Obolon district on 26 December.
The reports said he was dragged into a black Mercedes-Benz by men wearing balaclavas.
Police in Kiev confirmed to the BBC that a man had been kidnapped on the day in question, but would not confirm his identity.
A spokeswoman said that the matter was currently under investigation, and that more information would be made public later on.
Mr Lerner is a prominent Russian blockchain expert and the news of his kidnapping has stunned many in the international cryptocurrency community.
Exmo described him as an analytics manager.
Blockchain is the technology that underpins the digital currency Bitcoin.
Exmo Finance is registered with Companies House in the UK, but has its main operations in Ukraine.
According to its website, it has 94,955 active users trading cryptocurrencies.
Separately, Exmo said in a tweet that it been the target of a cyber attack on Thursday.
Exmo spokesman Anatoliy Larin told the BBC: "We are doing everything possible to speed up the search for Pavel Lerner.
"Despite the situation the exchange is working as usual. We also want to stress that nature of Pavel's job at Exmo doesn't assume access either to storages or any personal data of users. All users' funds are absolutely safe."
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 022
================================================================================================
merge-output/sources/023_T-W-Troy-Woody-Jr.txt
+201
View File
@@ -0,0 +1,201 @@
================================================================================================
CASE 023 | T.W. (Troy Woody Jr.) | September I, 2018 | USA
================================================================================================
DATABASE RECORD
id 23
date September I, 2018
original_date September I, 2018
year 2018
month 1
quarter 2018-Q3
victim T.W. (Troy Woody Jr.)
location Los Angeles, California
country USA
scenario Authority Misuse
description Home invasion by FBI impersonator who demanded laptop passwords to access cryptocurrency.
kidnappings 1
violence_torture 0
drugs_alcohol 0
weapons 1
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports Krebson Security
notes posed as FBI agent to enter the apartment
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** T.W. (Troy Woody Jr.)
**Attackers:** Perpetrators impersonating law enforcement
**Attack Method:** Authority Misuse - victim kidnapped
**Violence Used:** Threats/intimidation
**Crypto Stolen:** Amount not disclosed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://krebsonsecurity.com/wp-content/uploads/2024/09/woodyvzort.pdf
NOTES ON THIS FILE
* matched to sheet row 24: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Krebson Security
URL https://krebsonsecurity.com/wp-content/uploads/2024/09/woodyvzort.pdf
Origin reported_K&R sheet, row 24, column "Articles"
Length 11,892 chars
------------------------------------------------------------------------------------------------
Crooked Cops, Stolen Laptops & the Ghost of UGNazi
A California man accused of failing to pay taxes on tens of millions of dollars allegedly earned from cybercrime also paid local police officers hundreds of thousands of dollars to help him extort, intimidate and silence rivals and former business partners, the government alleges. KrebsOnSecurity has learned that many of the man’s alleged targets were members of UGNazi, a hacker group behind multiple high-profile breaches and cyberattacks back in 2012.
A photo released by the government allegedly showing Iza posing with several LASD officers on his payroll.
A federal complaint (PDF) filed last week said the Federal Bureau of Investigation (FBI) has been investigating Los Angeles resident Adam Iza. Also known as “Assad Faiq” and “The Godfather,” Iza is the founder of a cryptocurrency investment platform called Zort that advertised the ability to make smart trades based on artificial intelligence technology.
But the feds say investors in Zort soon lost their shorts, after Iza and his girlfriend began spending those investments on Lamborghinis, expensive jewelry, vacations, a $28 million home in Bel Air, even cosmetic surgery to extend the length of his legs.
The complaint states the FBI started looking at Iza after receiving multiple reports that he had on his payroll several active deputies with the Los Angeles Sheriff’s Department (LASD). Iza’s attorney did not immediately respond to requests for comment.
The complaint cites a letter from an attorney for a victim referenced only as “E.Z.,” who was seeking help related to an extortion and robbery allegedly committed by Iza. The government says that in March 2022, three men showed up at E.Z.’s home, and tried to steal his laptop in an effort to gain access to E.Z. cryptocurrency holdings online. A police report referenced in the complaint says three intruders were scared off when E.Z. fired several handgun rounds in the direction of his assailants.
The FBI later obtained a copy of a search warrant executed by LASD deputies in January 2022 for GPS location information on a phone belonging to E.Z., which shows an LASD deputy unlawfully added E.Z.’s mobile number to a list of those associated with an unrelated firearms investigation.
“Damn my guy actually filed the warrant,” Iza allegedly texted someone after the location warrant was entered. “That’s some serious shit to do for someone….risking a 24 years career. I pay him 280k a month for complete resources. They’re active-duty.”
The FBI alleges LASD officers had on several previous occasions tried to kidnap and extort E.Z. at Iza’s behest. The complaint references a November 2021 incident wherein Iza and E.Z. were in a car together when Iza asked to stop and get snacks at a convenience store. While they were still standing next to the car, a van with several armed LASD deputies showed up and tried to force E.Z. to hand over his phone. E.Z. escaped unharmed, and alerted 911.
E.Z. appears to be short for Enzo Zelocchi, a self-described “actor” who was featured in an ABC News story about a home invasion in Los Angeles around that same time as the March 2022 home invasion, in which Zelocchi is quoted as saying at least two men tried to rob him at gunpoint (we’ll revisit Zelocchi’s acting credits in a moment).
One of many self portraits published on the Instagram account of Enzo Zelocchi.
The criminal complaint makes frequent references to a co-conspirator of Iza (“CC-1”) — his girlfriend at the time — who allegedly helped Iza run his businesses and spend the millions plunked down by Zort investors. We know what E.Z. stands for because Iza’s girlfriend then was a woman named Iris Au, and in November 2022 she sued Zelocchi for allegedly stealing Iza’s laptop.
The complaint says Iza also harassed a man identified only as T.W., and refers to T.W. as one of two Americans currently incarcerated in the Philippines for murder. In December 2018, a then 21-year-old Troy Woody Jr. was arrested in Manila after he was spotted dumping the body of his dead girlfriend Tomi Masters into a local river.
Woody is accused of murdering Masters with the help of his best friend and roommate at the time: Mir Islam, a.k.a. “JoshTheGod,” referred to in the Iza complaint as “M.I.” Islam and Woody were both core members of UGNazi, a hacker collective that sprang up in 2012 and claimed credit for hacking and attacking a number of high-profile websites.
In June 2016, Islam was sentenced to a year in prison for an impressive array of crimes, including stalking people online and posting their personal data on the Internet. Islam also pleaded guilty to reporting dozens of phony bomb threats and fake hostage situations at the homes of celebrities and public officials (Islam participated in a swatting attack against this author in 2013).
Troy Woody Jr. (left) and Mir Islam, are currently in prison in the Philippines for murder.
In December 2022, Troy Woody Jr. sued Iza, Zelocchi and Zort, alleging (PDF) Iza and Zelocchi were involved in a 2018 home invasion at his residence, wherein Woody claimed his assailants stole laptops and phones containing more than $200 million in cryptocurrencies.
Woody’s complaint states that Masters also was present during his 2018 home invasion, as was another core UGNazi member: Eric “CosmoTheGod” Taylor. CosmoTheGod rocketed to Internet infamy in 2013 when he and a number of other hackers set up the Web site exposed[dot]su, which published the address, Social Security numbers and other personal information of public figures, including the former First Lady Michelle Obama, the then-director of the FBI and the U.S. attorney general. The group also swatted many of the people they doxed.
Exposed was built with the help of identity information obtained and/or stolen from ssndob dot ru.
In 2017, Taylor was sentenced to three years probation for participating in multiple swatting attacks, including the one against my home in 2013.
The complaint against Iza says the FBI interviewed Woody in Manila where he is currently incarcerated, and learned that Iza has been harassing him about passwords that would unlock access to cryptocurrencies. The FBI’s complaint leaves open the question of how Woody and Islam got the phones in the first place, but the implication is that Iza may have instigated the harassment by having mobile phones smuggled to the prisoners.
The government suggests its case against Iza was made possible in part thanks to Iza’s propensity for ripping off people who worked for him. The complaint cites information provided by a private investigator identified only as “K.C.,” who said Iza hired him to surveil Zelocchi but ultimately refused to pay him for much of the work.
K.C. stands for Kenneth Childs, who in 2022 sued Iris Au and Zort (PDF) for theft by deception and commercial disparagement, after it became clear his private eye services were being used as part of a scheme by the Zort founders to intimidate and extort others. Childs’ complaint says Iza clawed back tens of thousands of dollars in payments he’d previously made as part of their contract.
The government also included evidence provided by an associate of Iza’s — named only as “R.C.” — who was hired to throw a party at Iza’s home. According to the feds, Iza paid the associate $50,000 to craft the event to his liking, but on the day of the party Iza allegedly told R.C. he was unhappy with the event and demanded half of his money back.
When R.C. balked, Iza allegedly surrounded the man with armed LASD officers, who then extracted the payment by seizing his phone. The government says Iza kept R.C.’s phone and spent the remainder of his bank balance.
A photo Iza allegedly sent to Tassilo Heinrich immediately after Heinrich’s arrest on unsubstantiated drug charges.
The FBI said that after the incident at the party, Iza had his bribed sheriff deputies pull R.C. over and arrest him on phony drug charges. The complaint includes a photo of R.C. being handcuffed by the police, which the feds say Iza sent to R.C. in order to intimidate him even further. The drug charges were later dismissed for lack of evidence.
The government alleges Iza and Au paid the LASD officers using Zelle transfers from accounts tied to two different entities incorporated by one or both of them: Dream Agency and Rise Agency. The complaint further alleges that these two entities were the beneficiaries of a business that sold hacked and phished Facebook advertising accounts, and bribed Facebook employees to unblock ads that violated its terms of service.
The complaint says Iza ran this business with another individual identified only as “T.H.,” and that at some point T.H. had personal problems and checked himself into rehab. T.H. told the FBI that Iza responded by stealing his laptop and turning him in to the government.
KrebsOnSecurity has learned that T.H. in this case is Tassilo Heinrich, a man indicted in 2022 for hacking into the e-commerce platform Shopify, and leaking the user database for Ledger, a company that makes hardware wallets for storing cryptocurrencies.
Heinrich pleaded guilty and was sentenced to time served, three years of supervised release, and ordered to pay restitution to Shopify. Upon his release from custody, Heinrich told the FBI that Iza was still using his account at the public screenshot service Gyazo to document communications regarding his alleged bribing of LASD officers.
Prosecutors say Iza and Au portrayed themselves as glamorous and wealthy individuals who were successful social media influencers, but that most of that was a carefully crafted facade designed to attract investment from cryptocurrency enthusiasts. Meanwhile, the U.K. tabloids reported this summer that Au was dating Davide Sanclimenti, the 2022 co-winner on the dating reality show Love Island.
Au was featured on the July 2024 cover of “Womenpreneur Middle East.”
Recall that we promised to revisit Mr. Zelocchi’s claimed acting credits. Despite being briefly listed on the Internet Movie Data Base (imdb.com) as the most awarded science fiction actor of all time, it’s not clear whether Mr. Zelocchi has starred in any real movies.
Earlier this year, an Internet sleuth on Youtube showed that even though Zelocchi’s IMDB profile has him earning more awards than most other actors on the platform (here he is holding a Youtube top viewership award), Zelocchi is probably better known as the director of the movie once rated the absolute worst sci-fi flick on IMDB: A 2015 work called “Angel’s Apocalypse.” Most of the videos on Zelocchi’s Instagram page appear to be brief clips, some of which look more like a commercial for men’s cologne than scenes from a real movie.
A Reddit post from a year ago calling attention to Zelocchi’s sci-fi film Angel’s Apocalypse somehow earning more audience votes than any other movie in the same genre.
In many ways, the crimes described in this complaint and the various related civil lawsuits would prefigure a disturbing new trend within English-speaking cybercrime communities that has bubbled up in the past few years: The emergence of “violence-as-as-service” offerings that allow cybercriminals to anonymously extort and intimidate their rivals.
Found on certain Telegram channels are solicitations for IRL or “In Real Life” jobs, wherein people hire themselves out as willing to commit a variety of physical attacks in their local geographic area, such as slashing tires, firebombing a home, or tossing a brick through someone’s window.
Many of the cybercriminals in this community have stolen tens of millions of dollars worth of cryptocurrency, and can easily afford to bribe police officers. KrebsOnSecurity would expect to see more of this in the future as young, crypto-rich cybercriminals seek to corrupt people in authority to their advantage.
------------------------------------------------------------------------------------------------
ARTICLE 2
Source Krebson Security
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 24, column "Article 2"
Length 4,365 chars
------------------------------------------------------------------------------------------------
Nature of the Action
This case involves the theft of approximately 7,100 Bitcoin and some alternative cryptocurrency collectively worth approximately $284,500,000 based on today’s value. About ten years ago, when Woody was a teenager, he began mining Bitcoin by creating and validating cryptocurrency transactions on a blockchain network. He amassed a significant amount of cryptocurrency, which he stored in cryptocurrency wallets on several devices. The majority of the Bitcoins were on Bitcoin Core, a hardware wallet requiring access from Woody’s laptop devices to transfer funds. Additionally, Woody had several smartphones with cryptocurrency that used the blockchain.com app, containing access to transfer funds.
On the evening of September 1, 2018, Woody met with his friend Eric Taylor and Defendants Zelocchi and Iza for dinner, arranged by Zelocchi, at 25 Degrees restaurant in Hollywood. The stated purpose was to discuss cryptocurrency investing and opportunities.
The Robbery
On September 2, 2018, around 1:45 a.m., Woody, Taylor, and friend Michelle Masters were at an apartment on Hollywood Blvd. Zelocchi contacted Taylor to come down to the lobby. Taylor recognized Zelocchi and Iza from the previous night’s dinner. Zelocchi and Iza forced pills into Taylor’s mouth, handcuffed, and assaulted him while demanding to know where electronic devices were located. Iza took Taylor’s apartment keys and entered the apartment where Woody and his girlfriend Masters were present, wearing a mask.
Iza brandished a 9mm semi-automatic handgun, claimed to be an FBI agent, and flashed a badge. He assaulted Woody and Masters, demanding Woody hand over his Rolex and wallet, then handcuffed Woody’s hands and legs. Iza showed Woody the gun clip with bullets to intimidate him. Iza seized smartphones, laptops, the watch, wallet, and clothing, placed them in Woody’s bag, and took a photo of Woody handcuffed with Woody’s mobile device. Woody identified Iza and Iza removed his mask. Iza pulled the trigger, but the gun did not fire, before fleeing.
Stolen Items Include
HP Spectre x360 laptop containing 2,000 Bitcoin (approx. $80 million)
Lenovo laptop containing 5,000 Bitcoin (approx. $200 million)
HP laptop containing 20 Bitcoin (approx. $800,000)
Blackberry smartphone containing 50 Bitcoin (approx. $2 million)
Samsung Galaxy S9 Plus Edge with 20 Bitcoin (approx. $800,000)
Another Samsung Galaxy S9 Plus Edge with altcoins worth approx. $500,000
iPhone 7 Plus with 10 Bitcoin (approx. $400,000)
iPhone 6s
Rolex Submariner worth approx. $50,000
Clothing worth approx. $3,000
Wallet with IDs, credit cards, and cash approx. $3,000
Aftermath
Woody, Taylor, and Masters were in shock after the robbery. Woody fled for safety, hiding in an Airbnb with Taylor and Masters while Zelocchi and Iza tried repeatedly to contact him, demanding password access to devices. Iza sent the photo to Woody as intimidation. The robbers brazenly attempted to use Woody’s stolen credit card but left when asked for ID.
Woody eventually reported to police on September 4, 2018, describing the assault and loss. The officer indicated such incidents are common and few actions could be taken.
The theft devastated Woody financially and emotionally, since the stolen cryptocurrency represented most of his net worth.
Defendant Profiles and Corporate Entities
Defendant Iris Au (“AU”), with no financial training, owns and operates several shell companies including VURG and DREAM, both described as marketing or peer-to-peer cryptocurrency platforms, but with no real assets, physical presence, or employees. Defendant Iza is involved as founder and CEO of ZORT, another cryptocurrency platform used in alleged money laundering schemes.
The defendants used complex laundering techniques including "smurfing" to move stolen cryptocurrencies between wallets to evade detection. The funds passed through exchange platform accounts and were laundered via OTC brokers such as Altonomy, linked to billions in crypto laundering.
Additional Litigation
AU, Iza, and ZORT are sued in U.S. courts for securities fraud and conspiracy to defraud cryptocurrency investors of hundreds of millions of dollars.
The defendants live extravagantly well beyond means consistent with lawful income, residing in multi-million-dollar homes with luxury vehicles since the robbery.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 023
================================================================================================
merge-output/sources/024_Dallas.txt
+92
View File
@@ -0,0 +1,92 @@
================================================================================================
CASE 024 | "Dallas" | January 3, 2018 | USA
================================================================================================
DATABASE RECORD
id 24
date January 3, 2018
original_date January 3, 2018
year 2018
month 1
quarter 2018-Q1
victim "Dallas"
location Milwaukee, Wisconsin
country USA
scenario Armed Robbery in Public Space
description Convicted felon accused of firing gun inside downtown Milwaukee condo during Bitcoin sale
kidnappings 0
violence_torture 1
drugs_alcohol 0
weapons 1
theft 0
life_taken 0
money_wanted (null)
coin_type (null)
reports TMJ4
notes the suspect didn't want to buy Bitcoin and got into a discussion with the victim, who was encouraging him to do it
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** "Dallas"
**Attackers:** Unknown number of perpetrators
**Attack Method:** Armed Robbery in Public Space
**Violence Used:** Physical violence, firearms
**Crypto Stolen:** No theft completed
**Status:** Arrests made
LINKED SOURCES
[url] https://www.tmj4.com/news/local-news/north-dakota-man-arrested-in-mke-after-allegedly-firing-gun-during-bitcoin-transaction-gone-wrong
NOTES ON THIS FILE
* matched to sheet row 25: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source TMJ4
URL https://www.tmj4.com/news/local-news/north-dakota-man-arrested-in-mke-after-allegedly-firing-gun-during-bitcoin-transaction-gone-wrong
Origin reported_K&R sheet, row 25, column "Articles"
Length 1,511 chars
------------------------------------------------------------------------------------------------
Convicted felon accused of firing gun inside downtown Milwaukee condo during Bitcoin argument
MILWAUKEE — A Montana man is accused of firing a gun inside a downtown Milwaukee condo during an argument regarding a Bitcoin sale.
Jonathan Royce, 28, of Billings, Montana faces one count of second degree recklessly endangering safety, use of a dangerous weapon.
According to a criminal complaint, a witness in this case told investigators he met Royce in an attempt to sell him some Bitcoin, and there was a group of people inside a condo near Ogden and Jackson discussing the transaction when an argument ensued between Royce and a man named “Dallas.” The witness said Royce didn’t want to complete the sale and Dallas was encouraging him to. At one point, the witness said Royce pulled out a silver handgun and pointed it at Dallas. The witness said he took of running, and heard a shot fired as he did so.
A bullet strike was found on a stove vent in the condo, and a bullet was recovered from the floor under the vent.
Royce was discovered leaning into a Subaru with Montana plates, and a .32 caliber handgun was recovered from a bag in the back seat. A spent casing was recovered from the sidewalk next to where the vehicle was parked.
The complaint notes that Royce is a convicted felon in North Dakota.
Royce made his initial appearance in court on Jan. 4. Cash bond was set at $2,000. He was in court for his preliminary hearing on Jan. 10 and pleadd not guilty. A scheduling conference was set for Jan. 24.
------------------------------------------------------------------------------------------------
ARTICLE 2
Source TMJ4
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 25, column "Article 2"
Length 1,400 chars
------------------------------------------------------------------------------------------------
North Dakota man arrested in MKE after allegedly firing gun during bitcoin transaction gone wrong
Man allegedly fires gun over bitcoin transaction
A North Dakota man pleaded not guilty on Wednesday to firing his gun inside a condo near downtown Milwaukee over an attempted bitcoin transaction.
It happened Saturday, December 30 at the 601 Lofts Condominiums, 601 E. Ogden Ave., according to police.
Bear Attacks Wisconsin Man in Florida
Jonathan Royce, 28, was charged with recklessly endangering safety after allegedly firing his gun at a business associate who was arguing with him and several other people over the sale of the popular cryptocurrency.
The associate, who reported the confrontation to police, said a man named "Dallas" argued in favor of the sale, while Royce wanted it called off. As the argument escalated, Royce pulled out a gun and fired it once, striking a stove vent, according to the criminal complaint.
After surveying the scene, the Milwaukee Police Department recovered a .32 caliber handgun and a deformed bullet. They also arrested Royce, who was found "leaning into a Subaru with Montana plates," the complaint says.
Royce appears to be a felon from North Dakota, according to the complaint.
Speculative investment in bitcoin has increased dramatically over the past year, with one unit of the virtual currency costing as much as $19,000 at one point last month.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 024
================================================================================================
merge-output/sources/025_Pavel-Nyashin.txt
+70
View File
@@ -0,0 +1,70 @@
================================================================================================
CASE 025 | Pavel Nyashin | January 14, 2018 | Russia
================================================================================================
DATABASE RECORD
id 25
date January 14, 2018
original_date January 14, 2018
year 2018
month 1
quarter 2018-Q1
victim Pavel Nyashin
location Leningrad Oblast, Russia
country Russia
scenario Costly Fame
description Blogger Who Boasted About Crypto Wealth Beaten and Robbed For $425k
kidnappings 0
violence_torture 1
drugs_alcohol 0
weapons 0
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports CT
notes he was open about his investments online
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Pavel Nyashin
**Attackers:** Unknown number of perpetrators
**Attack Method:** Costly Fame
**Violence Used:** Physical assault
**Crypto Stolen:** Approximately $425k
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://cointelegraph.com/news/russia-blogger-who-boasted-about-crypto-wealth-beaten-and-robbed-for-425k
NOTES ON THIS FILE
* matched to sheet row 26: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source CT
URL https://cointelegraph.com/news/russia-blogger-who-boasted-about-crypto-wealth-beaten-and-robbed-for-425k
Origin reported_K&R sheet, row 26, column "Articles"
Length 1,662 chars
------------------------------------------------------------------------------------------------
Russia: Blogger Who ‘Boasted’ About Crypto Wealth Beaten and Robbed For $425k
A Russian cryptocurrency investor and blogger known online as Pavel Nyashin was attacked and robbed in his home in Leningrad Oblast the night of Jan. 14. The assailants stole funds worth 24 mln rubles ($425,000), according to local media.
Nyashin was tied and beaten while a group of masked assailants stole a safe containing cash and “essential documents.”
Nyashin, a self-made millionaire from cryptocurrency investing, had “boasted” about his wealth online and at meetings of well-known bloggers he attended, local media network NTV reports.
The crypto blogger told NTV in a video interview:
“They took the safe in the end, as they knew there was cash in the house. In it was a sum equivalent to 24 mln rubles, as well as a lot of essential documents.”
The 23-year-old Nyashin from St. Petersburg had previously made known about his successes online while advising on how to become rich from cryptocurrency, according to NTV, which ran an admonitory headline “Millionaire blogger beaten and robbed for boasting.” According to Russian-language cryptocurrency news outlet ForkLog, Nyashin is the founder of the YouTube channel on crypto trading that has almost 15,000 subscribers.
ForkLog also reported that the “bandits” destroyed all electronic equipment in Nyashin’s home and fled the scene in what appeared to be a Mercedes.
NTV adds that the assailants further removed a laptop he used to trade on exchanges. Nyashin himself has yet to find out if his accounts have been hacked and assess the full damage done.
A criminal case has been opened on the armed assault, NTV reports.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 025
================================================================================================
merge-output/sources/026_Maxsim-Latsoka-Anna-Nikurina.txt
+130
View File
@@ -0,0 +1,130 @@
================================================================================================
CASE 026 | Maxsim Latsoka & Anna Nikurina | January 15, 2018 | Thailand
================================================================================================
DATABASE RECORD
id 26
date January 15, 2018
original_date January 15, 2018
year 2018
month 1
quarter 2018-Q1
victim Maxsim Latsoka & Anna Nikurina
location Phuket, Thailand
country Thailand
scenario Home Invasion
description Russian gang steals 100,000 Euros in BTC from young Russian couple
kidnappings 1
violence_torture 0
drugs_alcohol 0
weapons 0
theft 1
life_taken 0
money_wanted 100,000 Euros
coin_type BTC, iPhone X, their iPad, Macbook Pro as well as their credit cards and passports.
reports AseanNow
notes posed as interpol agents
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Maxsim Latsoka & Anna Nikurina
**Attackers:** Gang of 10 perpetrators
**Attack Method:** Home Invasion - victim kidnapped
**Violence Used:** Threats/intimidation
**Crypto Stolen:** 100,000 Euros in BTC, iPhone X, their iPad, Macbook Pro as well as their credit cards and passports.
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://aseannow.com/topic/1020825-russian-gang-steal-bitcoin-worth-millions-from-young-russian-couple-in-phuket-condo-extortion/
NOTES ON THIS FILE
* matched to sheet row 27: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source AseanNow
URL https://aseannow.com/topic/1020825-russian-gang-steal-bitcoin-worth-millions-from-young-russian-couple-in-phuket-condo-extortion/
Origin reported_K&R sheet, row 27, column "Articles"
Length 1,534 chars
------------------------------------------------------------------------------------------------
Russian gang steal Bitcoin worth millions from young Russian couple in Phuket condo extortion
A Russian couple have gone to Thai police to say that compatriots posing initially as Interpol had entered their condominium and forced them to give passwords before stealing nearly 4 million baht in Bitcoin.
Maxsim Latsoka, 23, and Anna Nikurina, 28, were returning home on Monday at 10pm and as they entered their fourth floor condo room in Muang district they were bundled into the room by two Russian men.
The men said they were Interpol from Russia investigating Bitcoin irregularities. The men put a hood over Maxim and wrapped a towel around the head of his girlfriend before another Russian man came into the bedroom.
He ordered them to give the password of their computer notebook then the password of their Bitcoin account. If they didn't they were told they would be injected with drugs and handed over to the Thai police
The gang were in the room for a total of five hours, reported Thai Rath.
They managed to get 100,000 Euros in Bitcoin emptying the account. Then they fled with the notebook warning the couple they would be back to carry out their threats if they went to the Thai police.
A Thai forensics team were at the condo yesterday. The Russian couple initially were scared to report the theft but a friend who is a volunteer policeman persuaded them that it was better to report it.
Thai police said that they have information that the gang have fled to Malaysia.
Arrest warrants are being prepared.
------------------------------------------------------------------------------------------------
ARTICLE 2
Source AseanNow
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 27, column "Article 2"
Length 4,182 chars
------------------------------------------------------------------------------------------------
Couple are Robbed of $100,000 in Bitcoin While in Thailand
A Russian couple who were on holiday in Thailand were robbed of approximately $100,000 in Bitcoin according to local news. They were staying at a condo on a beach when the attack took place.
The Russian couple were staying on Lago Naiharn Beach in Phuket when they were robbed on the 15th of January. The robbery was reported to the Chalong police station two days afterwards.
The victims were Maxim Lastovka and his partner Anna Nikulina. Thankfully for the couple, they were luckily assisted by a Russian tourist official at the police station.
Hand over the Private Keys
According to the report, the couple came back to their home at about 10pm local time. The condo was located on the 4th floor of the apartment unit in the Mueang district of Phuket.
The suspects, who were also Russian, posed as Interpol agents and forced themselves into the unit. Once inside the apartment, they covered the head of Lastovka and took him to a private room.
They were held inside the apartment for 6 hours and the suspects threatened that they would kill Mr Lastovka if he did not give them what they were after. They threatened to inject the couple with a poisonous substance.
What they were after was the passwords to his laptops and the private key to his Bitcoin wallets. Once Mr Lastovka gave them the information that they required, they asked him to send the Bitcoin to their own address.
The criminals not only got away with over $100,000 of his Bitcoin but they also stole the couple’s iPhone X, their iPad, Macbook Pro as well as their credit cards and passports. They also threatened to come back to the couple if they went to the police.
Bandits Got Away
Victims Bitcoin Theft Thailand
The unfortunate victims with Police – Source: thephuketnews.com
Given that they threatened to return to the couple if they went to the police, the couple delayed reporting the crime. Hence, the thieves were able to make some headway on the authorities before police began the chase.
The stolen iPhone X had tracking turned on and as such, allowed the police to determine where the criminals were escaping to. They first noted that the phone went through a province on the mainland of Thailand before heading into Western Malaysia.
Exactly how the thieves knew that the man had a sizable investment in Bitcoin is not entirely certain. It appears that they were a Russian criminal gang that was tracking the couple. Mr Lastovka had said that he recognised one of the members hanging around the apartment earlier.
The Thai police had issued an international arrest warrant for the criminals and had already contacted their counterparts in Malaysia to alert them of where the iPhone was last tracked.
A Familiar Trend
When most people think of Bitcoin thefts, they will think of hackers who will take off with their Bitcoin using only digital means. However, as this case illustrates, plain vanilla criminals are more than willing to use old tactics to extort their loot.
Indeed, this is not the first time that this has occurred. There were recently reports of a man in New York who was robbed at gunpoint for Bitcoin as well as an news of a Russian exchange operator who was kidnapped in Ukraine.
There are many things that you can do, however, to protect yourself from these sorts of robberies. Firstly, always make sure that you do not let anyone know how much Bitcoin you have. This is one of the ways thieves can easily spot their victims.
Secondly, it may also make sense to hide your Bitcoin among numerous different devices and wallets. Have the really large amounts in cold paper storage that is kept in a safe deposit box.
You may also want to make use of a hardware wallet that you can hide in numerous places. These give you the ability to create numerous different accounts as well. Hence, you can store a smaller amount in one account and only let the criminals know about this account.
Of course, there are many of the normal precautions that you can take in order to make sure you don't fall victim. Always watch your back, be suspicious of your surroundings and if need be, get protection of some sort.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 026
================================================================================================
merge-output/sources/027_Lee.txt
+83
View File
@@ -0,0 +1,83 @@
================================================================================================
CASE 027 | ____ Lee | January 18, 2018 | Hong Kong
================================================================================================
DATABASE RECORD
id 27
date January 18, 2018
original_date January 18, 2018
year 2018
month 1
quarter 2018-Q1
victim ____ Lee
location North Point, Hong Kong
country Hong Kong
scenario P2P Trade Gone Wrong
description Bitcoin trader lured to bogus meeting and robbed of HK$1.4M
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 0
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports SCMP
notes setup fake p2p trade. they convinced the victim to meet later to buy more discounted bitcoin
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** ____ Lee
**Attackers:** Unknown number of perpetrators
**Attack Method:** P2P Trade Gone Wrong
**Violence Used:** Threats/intimidation
**Crypto Stolen:** Approximately $1.4 million
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.scmp.com/news/hong-kong/law-crime/article/2129665/hong-kong-bitcoin-trader-lured-bogus-meeting-and-robbed
NOTES ON THIS FILE
* matched to sheet row 28: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source SCMP
URL https://www.scmp.com/news/hong-kong/law-crime/article/2129665/hong-kong-bitcoin-trader-lured-bogus-meeting-and-robbed
Origin reported_K&R sheet, row 28, column "Articles"
Length 2,944 chars
------------------------------------------------------------------------------------------------
Hong Kong bitcoin trader lured to bogus meeting and robbed of HK$1.4 million
Police are searching for five men, two who posed as sellers and three who attacked victim and took his bag
The victim was attacked on a busy street in North Point. Photo: Nora TamThe victim was attacked on a busy street in North Point. Photo: Nora Tam
The victim was attacked on a busy street in North Point. Photo: Nora Tam
A citywide police search was under way on Friday for five men after a local bitcoin trader was lured to a bogus business meeting and robbed of HK$1.4 million (US$180,000) on a busy street in Hong Kong.
The five included two suspects who posed as sellers and arranged to meet the victim to trade bitcoin for cash, according to a police source.
“The other three attacked the victim and took his bag, containing cash and a mobile phone,” he said.
The attack happened in North Point, on Hong Kong Island.
As of just before noon on Friday, the five suspects were still on the run, according to police.
Did bitcoin just burst? How the cryptocurrency slump compares to history’s biggest fads
The victim is a 34-year-old Hong Kong man surnamed Lee, who was contacted via his WeChat account on Thursday morning. He was asked to go to the Starbucks outlet on Hennessy Road, Wan Chai for a business meeting at 4.30pm.
“He was given an offer to buy five bitcoin at a five per cent discount off the market price, but was instructed that the transaction would be conducted in cash,” the source said.
Two men, thought to be aged between 20 and 40, met Lee in the coffee shop, but the transaction was not completed. The Post understands Lee was carrying HK$450,000 at the time.
The victim was told that the pair wanted to trade more bitcoin, and another meeting was arranged at a McDonald’s outlet in North Point at 9.30pm the same day.
Why Chinese love bitcoin but ‘old money’ Hong Kong doesn’t: a former trading platform operator speaks out
Lee took a bag containing HK$1.4 million to the fast food outlet on King’s Road, North Point at 9.40pm but failed to find the two “sellers”.
At about 10pm, he received a phone call from one of the men, who claimed they got lost and instructed Lee to meet them outside the State Theatre Building on King’s Road – about 100 metres away – instead.
“Soon after the victim left the outlet, he was attacked from behind by three masked men,” another source said. “One of them pushed him to the floor, and the others snatched his bag containing the cash and a mobile phone.”
Police said no weapon was used in the incident.
Bitcoin’s plunge turns Winklevoss twins into ex-billionaires as focus turns to gold
The three robbers fled on foot and were seen turning onto North Point Road heading towards Provident Garden on Java Road. Officers scouted the area, but no arrests were made.
According to police, the victim suffered minor hand and leg injuries. He was bandaged at the scene but did not require hospital treatment.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 027
================================================================================================
merge-output/sources/028_Canadian-Bitcoins.txt
+123
View File
@@ -0,0 +1,123 @@
================================================================================================
CASE 028 | Canadian Bitcoins | January 23, 2018 | Canada
================================================================================================
DATABASE RECORD
id 28
date January 23, 2018
original_date January 23, 2018
year 2018
month 1
quarter 2018-Q1
victim Canadian Bitcoins
location Ottawa, Canada
country Canada
scenario Armed Robbery in Public Space
description Failed armed robbery attempt of Canadian bitcoin exchange
kidnappings 0
violence_torture 1
drugs_alcohol 0
weapons 1
theft 0
life_taken 0
money_wanted (null)
coin_type (null)
reports The Hacker News
notes failed attempt
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Canadian Bitcoins
**Attackers:** Unknown number of perpetrators
**Attack Method:** Armed Robbery in Public Space
**Violence Used:** Physical violence
**Crypto Stolen:** No theft completed
**Status:** Attack prevented/foiled
LINKED SOURCES
[url] https://thehackernews.com/2018/01/cryptocurrency-exchange-robbery.html
NOTES ON THIS FILE
* matched to sheet row 29: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source The Hacker News
URL https://thehackernews.com/2018/01/cryptocurrency-exchange-robbery.html
Origin reported_K&R sheet, row 29, column "Articles"
Length 2,664 chars
------------------------------------------------------------------------------------------------
Suspect charged in Bitcoin heist, police hunt 2 others
3 armed men bound employees at Bitcoin office before fleeing empty-handed, Ottawa police say
CBC News Posted: Jan 24, 2018 12:27 PM ET| Last Updated: Jan 24, 2018 12:27 PM ET
Heavily armed officers with dogs searched a wooded ravine near the scene of a robbery Tuesday morning. One of the three suspects was arrested without incident, but the other two remain at large, police say.
Heavily armed officers with dogs searched a wooded ravine near the scene of a robbery Tuesday morning. One of the three suspects was arrested without incident, but the other two remain at large, police say. (Jenna McMillan)
Ottawa police have arrested one suspect and are looking for two others after employees at a Bitcoin financial institution were held up at gunpoint Tuesday.
The attempted robbery happened on Concourse Gate off Colonnade Road just before 11 a.m., police said in a media release issued Wednesday.
Three suspected entered the business armed with handguns, gained control over four employees and bound them, police said. One of the employees was struck on the head with a gun.
A fifth employee, who remained unseen in an office, contacted police, and the suspects fled empty-handed.
Video shot from the passenger seat of a passing vehicle shows the manhunt in Nepean:
Ottawa Police Sgt Fernando Viera says they’re searching for a gun following yesterday’s robbery at a Bitcoin operation pic.twitter.com/hxIooG2q2N
— @JudyTrinhCBC
The employee who was struck in the head was taken to hospital for treatment.
Arriving officers saw one of the suspects run into a ravine north of Colonnade Road, and "extensive resources" were deployed to find him, including tactical and K-9 unit officers. The suspect was arrested later Wednesday "without incident," police said.
The arrested man, a 19-year-old from Ottawa, was charged with:
Five counts of robbery with a firearm.
Five counts of pointing a firearm.
Five counts of forcible confinement.
One count of wearing a disguise.
One count of carrying a concealed weapon.
One count of conspiracy to commit and indictable offence.
One count of possessing a firearm while prohibited.
One count of possessing a loaded, regulated firearm.
Police are searching for the other two suspects, and are hoping to speak to a person of interest who was inside the business when the three suspects arrived.
Investigators are expected to return to the scene Wednesday to search for additional evidence.
Anyone with information is asked to call the robbery unit at 613-236-1222, ext. 5116. Anonymous tips can be submitted by calling Crime Stoppers toll free at 1-800-222-8477 (TIPS).
------------------------------------------------------------------------------------------------
ARTICLE 2
Source The Hacker News
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 29, column "Article 2"
Length 1,957 chars
------------------------------------------------------------------------------------------------
Yikes! Three armed men tried to rob a Bitcoin Exchange in Canada
Jan 25, 2018Wang Wei
cryptocurrency-exchange-robbery
As many non-tech savvy people think that Bitcoin looks like a Gold coin as illustrated in many stock images, perhaps these robbers also planned to rob a cryptocurrency exchange thinking that way.
All jokes apart, we saw one such attempt on Tuesday morning, when three men armed with handguns entered the offices of a Canadian Bitcoin exchange in Ottawa, and restrained four of its employees.
The intruders then struck one of the employees in the head with a handgun, asking them to make an outbound transaction from the cryptocurrency exchange.
DFIR Retainer Services
A fifth employee in another cabin, who remained unseen in an office, called the police before any assets could be taken, and the robbers left empty-handed.
One of the suspects arrested later Wednesday after arriving police officers saw him run into a ravine north of Colonnade Road and deployed "extensive resources," including K-9 unit officers, to find him, CBC News reports.
"Police are looking for two additional suspects, both described as black males," the police says. "Investigators are also interested in identifying and speaking to a person of interest that was inside the premise as the suspects arrived. That person did not remain at the scene."
The suspect in custody, identified as 19-year-old Jimmy St-Hilaire, has been charged with the following offences:
5 counts of robbery with a firearm
5 counts of point a firearm
5 counts of forcible confinement
Wear disguise
Conspiracy to Commit an indictable offence
Carry concealed weapon
Possess firearm while prohibited
Possess weapon for committing an offence
Possess loaded regulated firearm
St-Hilaire is set to appear in court on January 24, 2018. Ottawa police are now looking for the remaining two suspects.
CIS Build Kits
The authorities have not revealed the name of the cryptocurrency exchange.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 028
================================================================================================
merge-output/sources/029_Danny-Aston-Amy-Jay.txt
+129
View File
@@ -0,0 +1,129 @@
================================================================================================
CASE 029 | Danny Aston & Amy Jay | January 27, 2018 | UK
================================================================================================
DATABASE RECORD
id 29
date January 27, 2018
original_date January 27, 2018
year 2018
month 1
quarter 2018-Q1
victim Danny Aston & Amy Jay
location Moulsford, Oxfordshire, England
country UK
scenario Home Invasion
description Armed home invasion of Bitcoin trading firm owner
kidnappings 0
violence_torture 1
drugs_alcohol 0
weapons 0
theft 0
life_taken 0
money_wanted (null)
coin_type (null)
reports Business Insider
notes failed attempt
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Danny Aston & Amy Jay
**Attackers:** Unknown number of perpetrators
**Attack Method:** Home Invasion
**Violence Used:** Physical violence
**Crypto Stolen:** No theft completed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.businessinsider.com/bitcoin-raid-moulsford-transfer-failed-thieves-got-nothing-2018-2
NOTES ON THIS FILE
* matched to sheet row 30: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Business Insider
URL https://www.businessinsider.com/bitcoin-raid-moulsford-transfer-failed-thieves-got-nothing-2018-2
Origin reported_K&R sheet, row 30, column "Articles"
Length 3,912 chars
------------------------------------------------------------------------------------------------
Britain's first Bitcoin heist as trader forced at gunpoint to transfer cyber currency
Danny Aston lives in a rented four-bedroom converted barn estimated to be worth at least £700,000
Danny Aston lives in a rented four-bedroom converted barn estimated to be worth at least £700,000 Credit: Ric Mellis/INS
By Tony Diver
28 January 2018 • 6:42pm
Armed robbers broke into the family home of a city financier turned Bitcoin trader and forced him to transfer the digital currency at gunpoint, in what is believed to be the first heist of its kind in the UK.
Four robbers in balaclavas forced their way into the home of Danny Aston, 30, who runs a digital currency trading firm, before reportedly tying up a woman and forcing Mr Aston to transfer an unknown quantity of the cryptocurrency.
Mr Aston lives in the picturesque village of Moulsford in South Oxfordshire, where episodes of Midsomer Murders have been filmed, in a rented four-bedroom converted barn estimated to be worth at least £700,000 on a private drive.
Police were called at around 9.40am on Monday to attend the home after raiders are reported to have entered the property by kicking down the door.
The Mail on Sunday reported that the men tied up a woman and kept a baby outside in a pram while forcing Mr Aston to transfer the Bitcoin. The value of a single Bitcoin is now around £8,000.
A neighbour confirmed on Sunday the property where the violent burglary took place, but said that Mr Aston and a woman believed to be his partner left Moulsford on Monday to stay with relatives and have not returned.
They said: "I was not here at the time, but I know the couple have left and are staying with relatives, they haven't been back since.
"We are all obviously a bit shaken up, even though a few days have passed now. It is not what you expect to happen around here."
Moulsford
The raid happened in the village of Moulsford Credit: Ric Mellis/INS
Mr Aston - who lives with his 31-year-old business partner Amy Jay, according to the latest Companies House records - previously worked at Trayport, a London-based financial software company that operates a platform for trading energy commodities.
In June 2017, he established his own digital currency firm just before Bitcoin’s huge surge in value in July, according to Companies House.
Both Mr Aston and Ms Jay are listed online as directors of Aston Digital Currencies Ltd, and a company called Butler Hosting, which specialises in “data processing, hosting and related activities”.
A user named Danny Aston has previously been active on trading site Poloniex, which allows users to trade and store digital currency.
A local resident described the victim of the attack as well-known, but suggested that the small village community had been left dazed by the news.
“Everyone is shocked I think,” he said. “We think we live in a safer space, and then this happens and everyone gets scared.”
A police spokesman said: “Thames Valley Police is investigating an aggravated burglary which occurred at a property in Moulsford on Monday.
“Officers were called at about 9.40am to a report that offenders had entered a residential property off Reading Road and threatened the occupants. No one was seriously injured during the incident.
“An investigation into the incident is underway and officers attended nearby Moulsford School as a precautionary measure. It is not believed there was a threat to anyone at the school.
"Officers are particularly interested in speaking to anyone travelling through the village on the A329 Reading Road between 7.30am and 10.30am on Monday who has Dashcam footage or anyone with mobile phone footage.
“People in the local community may notice an increased presence of officers in the area while our enquiries are ongoing. The investigation is in its early stages however initial enquiries suggest this may be a targeted incident.
“No arrests have been made at this stage."
------------------------------------------------------------------------------------------------
ARTICLE 2
Source Business Insider
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 30, column "Article 2"
Length 2,613 chars
------------------------------------------------------------------------------------------------
Armed raiders who held 2 bitcoin traders at gunpoint in rural England didn't actually manage to steal anything
By Kieran Corcoran
The approximate location of the raid in Moulsford, Oxfordshire.
Armed criminals attacked a home in Oxfordshire, Britain, last month.
It was the registered address of a cryptocurrency company.
Four men broke in and tried to force inhabitants to make a transfer.
But it failed and the raiders left with nothing, police said.
Officers are still looking for the men and issued descriptions.
Armed burglars who broke into the home of two British bitcoin traders and held them at gunpoint didn't actually manage to steal any cryptocurrency, police have said.
Four men, who are now on the run from Thames Valley Police, tried to force two traders to transfer a large quantity of bitcoin after kicking down the door of a home in rural Moulsford, Oxfordshire, on January 22.
The raid was carried out on the home of Danny Aston and his girlfriend Amy Jay, who had used it as the registered address of their business, Aston Digital Currencies.
But, according to an update on the case more than a week later, the transfer didn't actually work. They did not take any material possessions either, meaning they left empty-handed.
A statement released on Tuesday by Thames Valley Police described the incident:
"The offenders threatened the two men and a woman who were inside the property, with what appeared to be a firearm and demanded one of the occupants to transfer bitcoins electronically to another account.
"The victim was struck to his head but was not seriously injured during the incident. He attended the John Radcliffe Hospital and was later discharged. Nothing was stolen during the incident."
The Oxford Mail local newspaper confirmed with the police force that the transfer did not work, and were told by a spokesman: "It's correct to say that the attempted transaction of bitcoins failed."
"Targeted incident"
Police also released slightly more detail on the suspects, describing their race (three were black, one was white) and what they were wearing ("tracksuits/sports clothing").
Officers are still looking for the men. They asked anybody with dashcam video footage or other evidence from the morning of the raid to contact them.
Police have not issued further information on who the men might have been, but suggested that the raid "may be a targeted incident," implying a level of sophistication beyond that of small-time criminals.
Cryptocurrency and crime are overlapping more and more since the dramatic spike in the value of leading currencies like bitcoin.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 029
================================================================================================
merge-output/sources/030_Unidentified.txt
+73
View File
@@ -0,0 +1,73 @@
================================================================================================
CASE 030 | Unidentified | January 29, 2018 | USA
================================================================================================
DATABASE RECORD
id 30
date January 29, 2018
original_date January 29, 2018
year 2018
month 1
quarter 2018-Q1
victim Unidentified
location Cumming, Georgia
country USA
scenario Dodged Attack
description Five men arrested for planning armed home invasion of bitcoin owner
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 0
theft 0
life_taken 0
money_wanted (null)
coin_type (null)
reports 11alive
notes caught before executing their plan
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Unidentified
**Attackers:** Five individuals
**Attack Method:** Dodged Attack
**Violence Used:** Threats/intimidation
**Crypto Stolen:** No theft completed
**Status:** Arrests made
LINKED SOURCES
[url] https://www.11alive.com/article/news/crime/five-arrested-in-plot-to-break-into-forsyth-county-home-to-steal-bitcoin/85-551507487
NOTES ON THIS FILE
* matched to sheet row 31: exact date + country, unique candidate
------------------------------------------------------------------------------------------------
ARTICLE 1
Source 11alive
URL https://www.11alive.com/article/news/crime/five-arrested-in-plot-to-break-into-forsyth-county-home-to-steal-bitcoin/85-551507487
Origin reported_K&R sheet, row 31, column "Articles"
Length 2,644 chars
------------------------------------------------------------------------------------------------
Five arrested in plot to break into Forsyth County home to steal Bitcoin
Officials said five suspects had conspired to break into a Forsyth County home to steal Bitcoin. All are now in custody (upper row left to right): Trivette Adams; Robert South; Matthew Schwartz; (lower row): Michael McDermott, 18; Justin Ellison, 20.
Forsyth County Sheriff's Deputies said they had foiled a conspiracy to break into a home to steal nearly $1 million in Bitcoin.
CUMMING, Ga. -- The Forsyth County Sheriff's Office said five men had conspired to break into a Forsyth County home and steal nearly $1 million in Bitcoin. Their robbery investigation has been ongoing since January, 2018.
On Monday, January 29, the Forsyth County Sheriff's Office Narcotics Unit responded to a local hotel in connection with what was initially thought to be a drug investigation. Narcotics detectives made contact with four males who had zip ties, latex gloves, duct tape and bandanas in their possession.
Major Crimes Unit detectives also responded to the hotel. Due to a lack of sufficient evidence, the four males were released from custody.
Additional investigation that night linked the four males to a planned robbery of a Forsyth County homeowner. After detectives were able to secure arrest warrants, they moved to arrest the four -- Trivette Adams, Matthew Schwartz, Jacob South and Michael McDermont.
Officers found Adams and McDermont on Tuesday, January 30 near Atlanta Hartsfield-Jackson International Airport, attempting to leave the area by plane. Adams fled from deputies, but was apprehended after a brief foot chase.
South and Schwartz fled metro Atlanta, flying to Chicago before they could be caught by police. The Forsyth County Sheriff's Office sent two Major Crimes Unit detectives to Chicago where they were able to extradite the pair with the assistance of the Chicago Police Department.
A fifth suspect, Justin Ellison of Illinois, was interviewed by detectives in Illinois and arrested following additional investigation on May 11, 2018.
Trivette Adams, 20, of Pflugerville, Tex., has been charged with residential strong arm robbery and criminal trespass; Robert South, 21, of Norcross has been charged with residential strong arm robbery; Matthew Schwartz, 18, of Hesperia, Calif., has been charged with residential strong arm robbery; Michael McDermott, 18, has been charged with residential strong arm robbery and criminal trespass; Justin Ellison, 20, of Worth, Ill., has been charged with residential strong arm robbery and conspiracy to commit a felony.
All five suspects are being held in the Forsyth County Detention Center without bond.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 030
================================================================================================
merge-output/sources/032_Shailesh-Bhatt.txt
+151
View File
@@ -0,0 +1,151 @@
================================================================================================
CASE 032 | Shailesh Bhatt | February 9, 2018 | India
================================================================================================
DATABASE RECORD
id 32
date February 9, 2018
original_date February 9, 2018
year 2018
month 2
quarter 2018-Q1
victim Shailesh Bhatt
location Amreli, India
country India
scenario Authority Misuse
description Police Officers Beat, Extorted 200 BTC from Businessman
kidnappings 1
violence_torture 1
drugs_alcohol 0
weapons 1
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports The Block, Yahoo Finance
notes His ex-business partner was involved - he was the only one who knew about the investment. Cash stolen. The victim was accused of kidnapping two others earlier that same year.
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Sailesh Bhatt
**Attackers:** Individuals misusing authority
**Attack Method:** Authority Misuse - victim kidnapped
**Violence Used:** Physical assault
**Crypto Stolen:** Amount not disclosed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.theblock.co/post/368846/14-sentenced-to-life-imprisonment-in-indian-bitcoin-extortion-case-including-11-police-officers
NOTES ON THIS FILE
* matched to sheet row 33: reviewed and approved individually
------------------------------------------------------------------------------------------------
ARTICLE 1
Source The Block, Yahoo Finance
URL https://www.theblock.co/post/368846/14-sentenced-to-life-imprisonment-in-indian-bitcoin-extortion-case-including-11-police-officers
Origin reported_K&R sheet, row 33, column "Articles"
Length 2,337 chars
Trimmed site furniture removed on review; kept text is verbatim. Full original (2,351 chars) archived, sha256 704d1501d31e7503662623487cca24ca4f468798d7e2f6f186ad5e4d7623d4d8
------------------------------------------------------------------------------------------------
Gujarat cops kidnap Surat builder, extort Bitcoins worth Rs 13 crore
Ten Gujarat cops allegedly kidnapped and extorted 200 Bitcoins worth Rs 13 crore from a Surat-based builder and businessman, making it possibly the first case of kidnapping involving cryptocurrency.
In possibly the first case of kidnapping involving cryptocurrency, the Gujarat Police's Criminal Investigation Department (CID) has filed an FIR against ten cops, including an SP and an inspector, for allegedly kidnapping and extorting 200 Bitcoins worth Rs 13 crore from a Surat-based builder and businessman.
Three of the accused cops have been arrested while the inspector is absconding.
The businessman, Shailesh Bhatt, had filed a complaint with the CID alleging that the state Central Bureau of Investigation (CBI) officer Sunil Nair threatened him over the phone and asked him to come to the Gandhinagar CBI office on February 9.
When he landed at the CBI office, Bhatt was allegedly beaten up in the torture room and asked to pay Rs 10 crore.
After Bhatt pleaded with Nair, the ransom amount was fixed at Rs 5 crore, which was paid via a Hawala trader.
Subsequently, he was released but was later abducted by the cops near a fuel station in Gandhinagar and taken to Keshav Farms.
"They beat me up inside a room and threatened to kill me in a fake encounter if I did not hand over my Bitcoins," Bhatt told India Today.
"Amreli SP Jagdish Patel and Amreli inspector Anant Patel were involved. I was forced to transfer Rs 13 crore in Bitcoins to Paladiya's account," he alleged.
Bhatt accused his former business partner Kirit Paladiya and ex-MLA Nalin Kotadiya of also being part of the plot.
"I contacted Paladiya post demonetisation in 2016 to invest my money. He advised me to invest in Bitcoins and knew about my investment," he alleged. When Bhatt approached Kotadiya, the ex-MLA allegedly pressured him to pay the ransom.
Ashish Bhatia, DGP, CID (crime), informed the media that though the initial inquiry has not confirmed the payment of Bitcoins, the names of superintendent of police Patel and inspector Patel are mentioned in the report. "Inspector Patel is absconding and we have started an inquiry against SP Patel. It is a case of abduction and extortion," he said.
The Gujarat CID registered the FIR under several sections of the Indian Penal Code.
------------------------------------------------------------------------------------------------
ARTICLE 2
Source The Block, Yahoo Finance
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 33, column "Article 2"
Length 3,190 chars
Trimmed site furniture removed on review; kept text is verbatim. Full original (3,456 chars) archived, sha256 ff5433cda9aca116d4ba27858490267f488bdf439072348929959f95405d6963
------------------------------------------------------------------------------------------------
14 sentenced to life imprisonment in Indian bitcoin extortion case, including 11 police officers
Fourteen people were sentenced to life imprisonment after being convicted of involvement in a 2018 kidnapping and extortion case, in which a Surat businessman was abducted and forced to sell bitcoin as a ransom, according to local news reports.
The convicts include the district’s superintendent of police and a former legislative member.
The victim has himself been charged with a litany of offenses related to his own kidnapping and extortion of two BitConnect promoters.
Fourteen men have been sentenced to life imprisonment by an anti-corruption court in India after they were convicted of involvement in a 2018 kidnapping of an Indian man targeted for his crypto holdings.
The convicts include 11 police officers, including the former superintendent of police in the district where the crime took place, and a former member of India's legislative assembly. The men were convicted under the Indian Penal Code for kidnapping, extortion, and criminal conspiracy by Special Judge B.B. Jadav in Ahmedabad, according to local news reports.
The complainant, Shailesh Bhatt, was allegedly lured to a gas station on February 9, 2018 by men posing as agents from India's Central Bureau of Investigation. Upon arriving, Bhatt was kidnapped and detained at a nearby farmhouse. Bhatt was then reportedly threatened by the police officers at gunpoint until he agreed to meet their ransom demands.
The kidnappers initially demanded 176 BTC plus ₹32 crore in cash (currently about $3.6 million USD), but following negotiations, Bhatt sold 34 BTC and transferred the proceeds, about $150,000 USD, to his abductors. A deal to deliver the cash ransom fell through after the courier sensed foul play and did not transfer the money, according to reports.
Following their investigation, the prosecution lined up 172 witnesses to testify, including digital forensics experts, bank officials tracing fund transfers, and even some of the involved constables who turned approvers. 92 of those witnesses turned hostile during the trial, retracting or altering their testimony, raising concerns of potential witness intimidation behind the scenes. Judge Jadav issued a perjury notice to 25 hostile witnesses at the sentencing.
All 11 police officials involved were not only found guilty of the kidnapping and extortion, but also specifically under corruption law provisions for abusing public office. Nalin Kotadiya, the former Member of the Gujarat Legislative Assembly who represented the Dhari constituency (including the Amreli district where the crime took place) from 2012 to 2017, had evaded arrest for several months before his capture in September 2018.
Bhatt himself has been accused of kidnapping two BitConnect promoters and extorting them for 2,091 BTC, 11,000 LTC and ₹14.5 crore ($1.6 million USD) in cash. Bhatt was arrested on August 13, 2024 by India's Enforcement Directorate and charged with a litany of offenses, including kidnapping and money laundering, in his attempt to recoup his investment after BitConnect collapsed. Bhatt's case continues to wind through Indian courts.
------------------------------------------------------------------------------------------------
ARTICLE 3
Source The Block, Yahoo Finance
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 33, column "Article 3"
Length 2,795 chars
------------------------------------------------------------------------------------------------
India Jails 14 for Life in Crypto Extortion Case Involving Cops, Ex-MLA
The convicted include 11 serving and former police officers and one former legislator, Nalin Kotadiya, who served in Gujarat's Legislative Assembly from 2012 to 2017.
An Indian anti-corruption court has sentenced 14 men to life in prison for the 2018 kidnapping and extortion of a businessman over his cryptocurrency holdings.
Key Takeaways:
An Indian court sentenced 14 men to life in prison for kidnapping a crypto investor in 2018.
The victim was abducted at gunpoint and forced to transfer 34 BTC, with a larger ransom demand later thwarted.
The victim himself is now under investigation in a separate crypto extortion case involving BitConnect promoters.
The convicted include 11 serving and former police officers and one former legislator, Nalin Kotadiya, who served in Gujarat’s Legislative Assembly from 2012 to 2017, per local outlets.
The group was found guilty of kidnapping, extortion, and conspiracy under various sections of the Indian Penal Code. The sentencing was handed down by Special Judge B.B. Jadav in Ahmedabad.
Indian Businessman Lured and Abducted in Crypto Extortion Plot
The case stems from the abduction of Shailesh Bhatt, a businessman from Surat, who was reportedly lured to a gas station on February 9, 2018, by men pretending to be officers from India’s Central Bureau of Investigation.
Once there, Bhatt was taken to a farmhouse near Gandhinagar and held at gunpoint by police officers demanding cryptocurrency and cash.
Bhatt was forced to sell 34 Bitcoin, worth approximately $150,000 at the time, and transfer the funds to his captors.
A larger demand of 176 BTC and ₹32 crore (roughly $3.6 million USD) in cash was also made, but the courier delivering the cash suspected a setup and failed to complete the drop.
Prosecutors brought in 172 witnesses during the trial, including digital forensics specialists and bank officials.
However, 92 of those witnesses later recanted or altered their testimony. Judge Jadav responded by issuing perjury notices to 25 of them, citing concerns over witness tampering and obstruction of justice.
All 11 police officers were additionally convicted under India’s Prevention of Corruption Act for misuse of official position.
Kotadiya, who had evaded law enforcement for months, was eventually arrested in September 2018.
The case also puts a spotlight on Bhatt himself, who is currently facing legal proceedings for his alleged role in another crypto-related kidnapping.
Authorities claim Bhatt kidnapped two BitConnect promoters and extorted thousands of Bitcoin and Litecoin, along with over ₹14 crore in cash.
He was arrested in August 2024 by India’s Enforcement Directorate on charges including kidnapping and money laundering.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 032
================================================================================================
merge-output/sources/033_Tai.txt
+89
View File
@@ -0,0 +1,89 @@
================================================================================================
CASE 033 | ____ Tai | February 21, 2018 | Taiwan
================================================================================================
DATABASE RECORD
id 33
date February 21, 2018
original_date February 21, 2018
year 2018
month 2
quarter 2018-Q1
victim ____ Tai
location Taichung, Taiwan
country Taiwan
scenario P2P Trade Gone Wrong
description Four men assault bitcoin seller & transfer 18 BTC
kidnappings 0
violence_torture 0
drugs_alcohol 1
weapons 1
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports Arab News
notes the victim showed his bitcoins to the suspects
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** ____ Tai
**Attackers:** Four individuals
**Attack Method:** P2P Trade Gone Wrong
**Violence Used:** Drugging
**Crypto Stolen:** Amount not disclosed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.arabnews.com/node/1251816/world
NOTES ON THIS FILE
* matched to sheet row 34: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Arab News
URL https://www.arabnews.com/node/1251816/world
Origin reported_K&R sheet, row 34, column "Articles"
Length 1,310 chars
------------------------------------------------------------------------------------------------
Taiwanese Trader Loses 18 Bitcoins in Robbery
A bitcoin trader with the surname of Tai has become the victim of Taiwan’s first crypto robbery.
Taiwanese Police have stated that three men in their early 20s arrange to meet Mr. Tai in the city of Taichung under the pretext that they were wanting to purchase bitcoins from him. Once Mr. Tai had evidenced that he possessed 18 bitcoin using his phone, the assailants assaulted him and his friend, before taking his and phone transferring 18 bitcoins from his wallet. Taiching city police also stated that the suspects forced Mr. Tai to drink Kaoliang, a strong Taiwanese liquor, in an attempt to have the incident dismissed a drunken argument.
The police arrested one man at the scene of the crime after receiving a call about the incident. The official police statement said that “The police saw bloodstains at the scene…after further investigation, it was discovered to be a bitcoin virtual currency robbery,” adding that case comprised “the first domestic case of bitcoin robbery.”
Incidences of Crypto Robberies on Increase
The two other suspected assailants were arrested later, one of whom was found hiding on the outlying island of Kinmen. The fourth individual, surnamed Shih, was later detained and is accused of being the mastermind behind the robbery.
------------------------------------------------------------------------------------------------
ARTICLE 2
Source Arab News
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 34, column "Article 2"
Length 1,973 chars
------------------------------------------------------------------------------------------------
Four arrested over Taiwan’s first bitcoin robbery
TAIWAN: Taiwan police have arrested four men over a bitcoin robbery worth 5 million Taiwanese dollars in what they said was the first case of its kind on the island.
Bitcoin is a virtual currency created from computer code that allows anonymous transactions and its value has soared since it came into being in 2009.
Taiwan police said three men in their early twenties lured a man surnamed Tai to the central city of Taichung, pretending to be interested in buying bitcoins.
After Tai showed proof of his bitcoins on his phone, the scammers assaulted him and his friend, then transferred 18 bitcoins worth 5 million Taiwanese dollars from Tai’s account via his phone.
The suspects attempted to pass off the heist as a drunken row by forcing the victim to drink Kaoliang, a strong Taiwanese liquor, Taichung city police said in a statement.
Police arrived at the scene after receiving a call about a dispute and one man was detained. The other two had fled.
“The police saw bloodstains at the scene ... after further investigation, it was discovered to be a bitcoin virtual currency robbery,” the statement released Wednesday said.
It described the case, which happened earlier this month, as “the first domestic case of bitcoin robbery.”
The two other suspects were later arrested, one on the outlying island of Kinmen where he had gone to escape police.
The fourth man, surnamed Shih, believed to be the mastermind behind the robbery, was also detained.
Britain saw its first Bitcoin armed robbery last month, according to reports, in which a virtual currency trader and his wife were threatened with a gun.
Bitcoin and other cryptocurrencies are independent of governments and banks and use blockchain technology, where encrypted digital coins are created by supercomputers.
But calls are mounting for virtual currencies to be regulated, and prices have fluctuated in recent months amid concerns over tightened control.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 033
================================================================================================
merge-output/sources/034_Yury-Mayorov.txt
+70
View File
@@ -0,0 +1,70 @@
================================================================================================
CASE 034 | Yury Mayorov | February 26, 2018 | Russia
================================================================================================
DATABASE RECORD
id 34
date February 26, 2018
original_date February 23, 2018
year 2018
month 2
quarter 2018-Q1
victim Yury Mayorov
location Moscow, Russia
country Russia
scenario Kidnapping
description Crypto Developer Beaten, Robbed Of 300 BTC
kidnappings 1
violence_torture 1
drugs_alcohol 1
weapons 1
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports CT
notes stolen phones, laptop and cripto wallet access
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Yury Mayorov
**Attackers:** Unknown number of perpetrators
**Attack Method:** Kidnapping for ransom
**Violence Used:** Physical assault, drugging
**Crypto Stolen:** Approximately 300 BTC
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://cointelegraph.com/news/russian-crypto-developer-beaten-robbed-of-300-btc-on-moscow-streets
NOTES ON THIS FILE
* matched to sheet row 35: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source CT
URL https://cointelegraph.com/news/russian-crypto-developer-beaten-robbed-of-300-btc-on-moscow-streets
Origin reported_K&R sheet, row 35, column "Articles"
Length 1,962 chars
------------------------------------------------------------------------------------------------
Russian Crypto Developer Beaten, Robbed Of 300 BTC On Moscow Streets
Russian crypto developer Yury Mayorov was kidnapped in Moscow, beaten, robbed of 300 BTC, and forced by the robbers to take an unknown pill after with a swig of vodka.
Four unknown men kidnapped Yury Mayorov, the creator of cryptocurrency PRIZM, Forklog news outlet reported yesterday, Feb. 26. According to Forklog, Mayorov was robbed of $20,000, 300 bitcoins (BTC), and three iPhones.
Data on CoinMarketCap shows that PRIZM has a total market cap of around $15.5 mln, and is trading at around $1.04 by press time.
According to Mayorov’s own allegations, he was grabbed off of Isakovskogo Street by four men on Feb. 23 at 10:00 pm in Moscow, put into a Mercedes, and beaten while the men drove around the city.
The men took the US dollars, which Mayorov had just exchanged for an upcoming trip to India, the iPhones, and his laptop with access to his crypto wallet with 300 BTC, worth a little over $3 mln today.
Telegram channel Mash, which originally broke the news of the attack, reported that before the robbers let Mayorov go, they “gave Yury some bright pill and forced him to drink it with vodka,” causing him to go to the hospital before being able to report the incident to the police.
Kidnappings and robberies of people involved in cryptocurrencies are becoming more frequent occurrences across Russia and Ukraine.
Four days ago, on Feb. 23, a crypto investor in Moscow was cut in the face with a knife and 100 BTC, now worth about $1 mln, stolen from him. Another attack on a crypto investor took place in St. Petersburg in mid-January, when a crypto YouTube blogger who had bragged about his wealth was attacked and robbed at home of 24 mln rubles, equal to about $428,000.
In December of last year in Ukraine, Pavel Lerner, the director of UK-based crypto exchange EXMO, was kidnapped in Kiev and only released after three days after more than $1 mln in BTC was paid as ransom.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 034
================================================================================================
merge-output/sources/035_Unidentified.txt
+64
View File
@@ -0,0 +1,64 @@
================================================================================================
CASE 035 | Unidentified | February 23, 2018 | Russia
================================================================================================
DATABASE RECORD
id 35
date February 23, 2018
original_date February 23, 2018
year 2018
month 2
quarter 2018-Q1
victim Unidentified
location Moscow, Russia
country Russia
scenario Assault - Mugging
description Crypto investor has face mutilated, robbed of $1M in BTC
kidnappings 0
violence_torture 1
drugs_alcohol 0
weapons 1
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports CT
notes they mutilated his face with a knife
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Unidentified
**Attackers:** Unknown number of perpetrators
**Attack Method:** Assault - Mugging
**Violence Used:** Severe mutilation
**Crypto Stolen:** Approximately $1 million
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://cointelegraph.com/news/moscow-man-mutilated-and-mugged-for-1-million-in-bitcoin-local-sources-report
NOTES ON THIS FILE
* matched to sheet row 36: exact date + country, unique candidate
------------------------------------------------------------------------------------------------
ARTICLE 1
Source CT
URL https://cointelegraph.com/news/moscow-man-mutilated-and-mugged-for-1-million-in-bitcoin-local-sources-report
Origin reported_K&R sheet, row 36, column "Articles"
Length 771 chars
------------------------------------------------------------------------------------------------
Moscow Man Mutilated And Mugged For $1 Million In Bitcoin, Local Sources Report
A man has lost $1 mln worth of Bitcoin to muggers who attacked him when he refused to part with it, local sources report
A cryptocurrency investor fell victim to unidentified assailants in Moscow who reportedly disfigured him and stole over $1 mln worth of Bitcoin, today, Feb. 23, according to local crypto journal Forklog.
According to Forklog, the victim, who has not been named, was in the southern district of the Russian capital when a group of muggers stopped him and demanded he transfer his holdings.
When he refused, they “mutilated his face with a knife” before he surrendered his collection of around 100 BTC, approximately $1,020,000 at press time, according to the publication.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 035
================================================================================================
merge-output/sources/038_Multiple-gas-stations.txt
+95
View File
@@ -0,0 +1,95 @@
================================================================================================
CASE 038 | Multiple gas stations | March 22, 2018 | USA
================================================================================================
DATABASE RECORD
id 38
date March 22, 2018
original_date March 22, 2018
year 2018
month 3
quarter 2018-Q1
victim Multiple gas stations
location Irving & Mesquite, Texas
country USA
scenario Armed Robbery in Public Space
description Robbers douse clerks with pepper spray, steal from Bitcoin ATMs in Irving and Mesquite
kidnappings 0
violence_torture 1
drugs_alcohol 1
weapons 0
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports Fox4
notes cash robberies from btc atms
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Multiple gas stations
**Attackers:** Unknown number of perpetrators
**Attack Method:** Armed Robbery in Public Space
**Violence Used:** Physical violence, drugging, chemical weapons
**Crypto Stolen:** Amount not disclosed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.fox4news.com/news/bitcoin-bandits-target-dallas-county-cryptocurrency-atms
NOTES ON THIS FILE
* matched to sheet row 39: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Fox4
URL https://www.fox4news.com/news/bitcoin-bandits-target-dallas-county-cryptocurrency-atms
Origin reported_K&R sheet, row 39, column "Articles"
Length 1,619 chars
Trimmed site furniture removed on review; kept text is verbatim. Full original (1,881 chars) archived, sha256 6678078d26d852d4b65be2d94c14800cd72f569d6f5f26f7661034ef6ee37303
------------------------------------------------------------------------------------------------
Bitcoin bandits target Dallas County cryptocurrency ATMs
Dallas is a startup for bitcoin ATMs where the cryptocurrency can be bought with cash or exchanged for cash.
In late March, two bitcoin ATMs were ravaged by robbers who used high-powered pepper spray known as bear spray to overpower clerks and rob the machines.
Bitcoin is still relatively new and has only been around for about a decade. The new technology has created new thievery. Police in Irving and Mesquite are now looking for the bitcoin bandits.
A bitcoin ATM at a Mesquite gas station was targeted on March 28. Video shows a man buying Gatorade at while at the counter who looks right at the camera. He then returns and sprays the female clerk with bear spray. His partner then breaks in the bitcoin ATM.
“Seems like these machines do contain some cash,” explained Mesquite Police Lt. Brian Parrish. “Apparently, there comes a point when you exchange bitcoins for cash.”
Irving saw the first bitcoin robbery on March 22.
“Once the suspects incapacitated the clerk, then they were able to just break into it and steal the cash cassettes,” explained Irving Police Officer James McLellan.
The motive is the same in both bitcoin robberies. In the Irving case, a heavyset guy in a gray hoodie goes in and sprays the clerk. A thin man in a Raiders hat then hands him a crowbar and goes to work on the ATM machine.
“It’s one thing to steal or rob from someone,” Parrish said. “It’s another to hurt a defenseless clerk.”
Crime Stoppers is offering $5,000 for the names of the bitcoin bandits. Anyone with information is urged to contact Mesquite or Irving PD.
------------------------------------------------------------------------------------------------
ARTICLE 2
Source Fox4
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 39, column "Article 2"
Length 1,761 chars
Trimmed site furniture removed on review; kept text is verbatim. Full original (1,894 chars) archived, sha256 4f3b4df5957da335467165b638096f8f20de4ff4b1cc6fc8591f1e7b3c9453a4
------------------------------------------------------------------------------------------------
Robbers douse clerks with pepper spray, steal from Bitcoin ATMs in Irving and Mesquite
Surveillance footage captured incidents at a Chevron in Irving and an Exxon in Mesquite.
A pair of robbers remain at large after breaking into a Bitcoin ATM at an Irving gas station and spraying a clerk with bear deterrent.
Less than a week later, a similar robbery took place at a gas station in Mesquite.
The first robbery happened around 10 p.m. March 22 at the Chevron in the 7200 block of North MacArthur Boulevard, at State Highway 161.
Surveillance footage shows a man in a hoodie walk in and spray the clerk with bear deterrent — a type of pepper spray stronger than what's sold for self-defense against humans.
A second man follows and hands a crowbar to the first robber, who pries open the ATM. The accomplice stands guard near the register while the clerk wipes his eyes.
The pair then leave the store with cash containers from the ATM and speed off in a gray or silver SUV. Police did not disclose how much money was stolen.
Police described the robbers as black men in their late 20s to early 30s.
The first was about 6 feet tall and 180 pounds, and was wearing a gray and black Nike hoodie, blue jeans and black and white sneakers.
The second was about about 6 feet tall and 140 to 160 pounds, and was wearing a black jacket, sagging jeans over blue underwear, maroon sneakers, blue gloves and a gray Oakland Raiders cap.
Six days later, a similar robbery took place at the Exxon in the 2200 block of Oates Drive, near North Galloway Avenue in Mesquite.
Around 11:30 a.m., a man wearing a gray hoodie and a red Nike cap sprayed the clerk with pepper spray. A second person then broke into the store's Bitcoin ATM.
The pair then fled in a vehicle, police said.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 038
================================================================================================
merge-output/sources/039_Pang-Joon-Hau.txt
+97
View File
@@ -0,0 +1,97 @@
================================================================================================
CASE 039 | Pang Joon Hau | April 8, 2018 | Singapore
================================================================================================
DATABASE RECORD
id 39
date April 8, 2018
original_date April 8, 2018
year 2018
month 4
quarter 2018-Q2
victim Pang Joon Hau
location Singapore
country Singapore
scenario P2P Trade Gone Wrong
description Man seeking to buy BTC robbed of $365,000
kidnappings 0
violence_torture 1
drugs_alcohol 0
weapons 1
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports CT
notes setup of fake p2p trade, cash stolen
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Pang Joon Hau
**Attackers:** Unknown number of perpetrators
**Attack Method:** P2P Trade Gone Wrong
**Violence Used:** Physical violence
**Crypto Stolen:** Approximately $365,000
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://cointelegraph.com/news/two-bogus-bitcoin-brokers-charged-with-365000-cash-robbery-in-singapore
NOTES ON THIS FILE
* matched to sheet row 40: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source CT
URL https://cointelegraph.com/news/two-bogus-bitcoin-brokers-charged-with-365000-cash-robbery-in-singapore
Origin reported_K&R sheet, row 40, column "Articles"
Length 1,355 chars
------------------------------------------------------------------------------------------------
Two Bogus Bitcoin Brokers Charged With $365,000 Cash Robbery In Singapore
Two sham Bitcoin sellers have been charged with assault and the alleged theft of $365,000 cash from a Malaysian man in Singapore.
Two 36-year-old men have been arrested in Singapore after allegedly stealing $365,000 in cash from a Malaysian man who wanted to buy Bitcoin (BTC) from them, local media outlets reported Thursday, April 12.
The victim, Pang Joon Hau, had come to Singapore expressly to buy Bitcoins with cash, and believed both men to be Bitcoin sellers, arranging to meet them in his hotel on April 8.
The two men are said to have assaulted both Mr. Pang and his broker, fleeing with the cash.
One of the accused, Mohd Abdul Rahman Mohama, allegedly claimed he was a part-time Bitcoin broker. He is reported to have given his accomplice Syed Mokhtar Syed Yusope about $10,000 and himself spent around $80,000 on luxury goods, including a Rolex watch worth $45,800. The remaining $271,000 are yet to be accounted for. The two were arrested April 9th and 10th, respectively.
At a press conference April 12, Singapore Commander of Central Police Division, Assistant Commissioner of Police Arthur Law said that it is “highly unusual” for people to transact Bitcoin in person, and that Singaporean police are now investigating the origins of Mr. Pang’s large sum of cash.
------------------------------------------------------------------------------------------------
ARTICLE 2
Source CT
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 40, column "Article 2"
Length 2,926 chars
------------------------------------------------------------------------------------------------
Malaysian here to buy bitcoins ends up being robbed of $365,000
A Malaysian man who arranged to meet a prospective bitcoin seller to buy the digital currency was robbed of $365,000 in cash instead.
Mr Pang Joon Hau, believed to be in his 20s, had come to Singapore to buy bitcoins and contacted a Singaporean broker.
On Sunday, Mr Pang and his broker met a man who claimed to have bitcoins to sell, as well as another man who passed himself off as a broker, at Hotel 81 in Middle Road, where Mr Pang was staying.
After ascertaining that Mr Pang had the sum that both parties agreed upon, the two men assaulted the Malaysian and his broker and made off with the cash, the police said at a press conference yesterday.
Two 36-year-old men were later arrested and charged with robbery with hurt. One of them, Mohd Abdul Rahman Mohamad, was on the run when he allegedly robbed Mr Pang.
Central Police Division commander Arthur Law told reporters yesterday that it is not common for people to perform bitcoin transactions in person, and with such a large amount of cash.
A police spokesman added that the police are investigating the origins of Mr Pang's money.
Abdul Rahman, who was charged yesterday, had allegedly committed other offences, including cheating in 2016, and had a warrant of arrest issued against him when he failed to turn up in court on April 5.
He allegedly robbed Mr Pang three days later with Uber driver Syed Mokhtar Syed Yusope at around 11.40pm.
Mokhtar was arrested at Woodlands Checkpoint on Monday and charged with one count of robbery with hurt two days later. Abdul Rahman, who was caught in a Sentosa hotel on Tuesday, was handed a similar charge yesterday.
Abdul Rahman's former wife, Yogeshwry Raman, 33, was also taken to court yesterday and charged with dishonestly receiving stolen property valued at $50,300, including a Rolex watch worth $45,800.
Abdul Rahman was facing 11 other charges before he allegedly robbed Mr Pang.
He is said to have assaulted a man known as Yugendiran Jagapalan in a flat at Block 8 Lorong Lew Lian, near Upper Serangoon Road, on April 19, 2016.
On July 10 that year, he allegedly misappropriated debit cards belonging to another man.
He is also accused of committing five counts of cheating with alleged accomplice Selvandran Nagendran, 33, later that day.
They allegedly used the cards to buy items worth $3,674, including a mobile phone and two rings.
Abdul Rahman is also accused of harassing a man and a woman by hurling vulgarities at them on Aug 15, 2016. He allegedly harassed the woman again on Dec 7 that year before assaulting the same man later.
Mokhtar's case has been adjourned to next Wednesday, while Abdul Rahman and Yogeshwry will be back in court next Thursday.
The trio are now remanded at Central Police Division.
The police have advised the public to exercise discretion when dealing with strangers, and to avoid carrying large amounts of cash.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 039
================================================================================================
merge-output/sources/040_Ryan-Rice.txt
+72
View File
@@ -0,0 +1,72 @@
================================================================================================
CASE 040 | Ryan Rice | April 11, 2018 | USA
================================================================================================
DATABASE RECORD
id 40
date April 11, 2018
original_date April 11, 2018
year 2018
month 4
quarter 2018-Q2
victim Ryan Rice
location Miami, Florida
country USA
scenario P2P Trade Gone Wrong
description Bitcoin buyer shoots robber in self defense
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 1
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports Miami Herald
notes the victim had a gun and he used it in self defense
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Ryan Rice
**Attackers:** Unknown number of perpetrators
**Attack Method:** P2P Trade Gone Wrong
**Violence Used:** Threats/intimidation
**Crypto Stolen:** Amount not disclosed
**Status:** Victim defended self; suspect injured/deceased
LINKED SOURCES
[url] https://www.miamiherald.com/news/local/crime/article208997064.html
NOTES ON THIS FILE
* matched to sheet row 41: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Miami Herald
URL https://www.miamiherald.com/news/local/crime/article208997064.html
Origin reported_K&R sheet, row 41, column "Articles"
Length 2,540 chars
------------------------------------------------------------------------------------------------
Bitcoin deal gone bad lands man with bullet wound and felony charge
A shooting in downtown Miami that left one man badly injured and under arrest was a Bitcoin deal gone bad, police said.
The blown-up business deal last week, according to police, involved two men — Ryan Rice and an unidentified companion — who started the day in Gainesville with $30,000 cash and a plan to turn it into $35,000 worth of Bitcoin.
Rice told police he was concerned about his safety because of the large amount of cash involved. That premonition proved prophetic, police said.
Shortly after the pair met up at a Whole Foods with the Bitcoin dealer, whom police have not identified, the transaction turned violent. A fourth man, Marcarrous Clark, rushed them in a parking garage and a struggle erupted for the cash. Rice, police say, shot Clark but he has not been charged. Police are treating the shooting as self-defense though the investigation is ongoing.
"One guy said, 'Back off, I have a weapon,' " said Miami police spokeswoman Kiara Delva. "The other guy charged at the victim anyway."
Clark was still hospitalized Monday, almost a week after the incident. He's been charged with strong-arm attempted robbery.
Bitcoin is a cryptocurrency that works without a centralized banking system. Its value fluctuates because of a number of factors, including how it's perceived by the public, retailers and currency speculators. When last week's deal went sour, Bitcoin was trading at about $7,000 a coin. On Monday, its value had increased to almost $8,000.
According to Miami police, the deal was intentionally set up to happen at a "public place" — in this case, the Whole Foods supermarket at 299 SE Third St.
Inside Rice's vehicle in the parking garage, Rice handed over the $30,000, according to Clark's arrest report. At that point, the Bitcoin transfer was supposed to be made over the Internet. When the Bitcoin seller told Rice and his associate that he was afraid to walk to his vehicle with so much money, they agreed to escort him.
But while walking through a stairwell in the garage, Clark appeared and grabbed at a backpack with the cash in it. When Rice pulled a gun and warned Clark he would shoot, the arrest report says, Clark still charged at him. Rice fired his weapon. Clark stumbled about two blocks before collapsing. Miami Fire Rescue took him to the hospital. His condition Monday was unknown.
Local streets were blocked off until police were certain there wasn't a gunman on the loose, which snarled traffic in the area for hours.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 040
================================================================================================
merge-output/sources/041_2-unidentified-Asian-brothers.txt
+104
View File
@@ -0,0 +1,104 @@
================================================================================================
CASE 041 | 2 unidentified Asian brothers | April 25, 2018 | UAE
================================================================================================
DATABASE RECORD
id 41
date April 25, 2018
original_date April 25, 2018
year 2018
month 4
quarter 2018-Q2
victim 2 unidentified Asian brothers
location Dubai, UAE
country UAE
scenario P2P Trade Gone Wrong
description Gang of 10 robbed two brothers of AED 7m ($1.9m) in cash who were looking to buy Bitcoin
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 0
theft 0
life_taken 0
money_wanted (null)
coin_type (null)
reports Arabian Business
notes setup of fake p2p trade, cash stolen
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** 2 unidentified Asian brothers
**Attackers:** Gang of 10 perpetrators
**Attack Method:** P2P Trade Gone Wrong
**Violence Used:** Threats/intimidation
**Crypto Stolen:** No theft completed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.arabianbusiness.com/industries/banking-finance/395302-dubai-gang-steals-aed7m-in-bitcoin-scam
NOTES ON THIS FILE
* matched to sheet row 42: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Arabian Business
URL https://www.arabianbusiness.com/industries/banking-finance/395302-dubai-gang-steals-aed7m-in-bitcoin-scam
Origin reported_K&R sheet, row 42, column "Articles"
Length 1,166 chars
------------------------------------------------------------------------------------------------
Gang steals $1.9m in Dubai Bitcoin scam
Artificial intelligence integrated in Dubai Police’s most recent security systems helped solve the case
An Asian gang which stole AED7m ($1.9m) in an armed robbery related to a Bitcoin scam has been arrested by Dubai Police.
The gang, led by a Gulf national, assaulted and robbed two Asian brothers at gun point on April 25 after luring them into a trading office, which they had seized from the owner, with the aim of selling them Bitcoin for the agreed amount.
Authorities said they had identified the Gulf gang leader just four hours after the incident, which helped them arrest the 10 members in as fast as 48 hours, despite initial lack of evidence.
The money was then returned to the brothers.
Dubai Police chief Abdullah Al Marri urged traders to follow the right legal procedures when trading in order to avoid being targeted by gangs.
Major general Khalil Al Mansoori praised the team’s fast response time and gave thanks to Abu Dhabi, Sharjah and Ajman Police for their cooperation in solving the case.
He said artificial intelligence integrated in Dubai Police’s most recent security systems helped solve the case.
------------------------------------------------------------------------------------------------
ARTICLE 2
Source Arabian Business
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 42, column "Article 2"
Length 1,980 chars
------------------------------------------------------------------------------------------------
Bitcoin heist: Dubai Police arrest 10, recover Dh7 million
Amira Agarib /Dubai
Two Asian brothers were lured by the gang members to their office.
Dubai Police have recovered Dh7 million and arrested a gang of 10 who deceived two brothers who wanted to buy Bitcoin.
Police said in statement on Saturday that two Asian brothers were lured by the gang members to their office. After assaulting the brothers, the gang stole the money and left the scene.
Lt Colonel Adel Al Joker, Director of Criminal Investigation Department (CID) at Dubai Police, said the operation room received information about the case occurred in Al Muraqabbat area on April 25.
The brothers were looking for someone to buy Bitcoin. The gang lured the two, claiming that they can sell Bitcoin.
In the meantime, the head of the gang deceived a commercial shop owner in Al Muraqabbat area, who put an advertisement to sell his office and trade license.
The gang leader told him that he wanted to buy his office and license, and the owner gave him the key to check his office after 8pm. Using this opportunity, the gang lured the two brothers to the office.
Six members of the gang met the two brothers inside the office while the rest waited outside the office.
Once the brothers reached the office, the gang members assaulted the two and tied their hands, locked them inside the room and escaped with the money.
Major General Abdullah Khalifa Al Merri, Commander-In-Chief of Dubai Police, praised his officers who arrested the gang in short time despite the fact that the thieves had left no evidence behind.
The police officials managed to identify the GCC mastermind within four hours.
Major General Khalil Ebrahim Al Mansouri, Assistant Commander-in-Chief for Criminal Investigation Affairs, said the police have used the smart programme and artificial intelligence technology to trace the gang in record time.
"The Analysis Centre helped the officers to arrest all gang members," he pointed out.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 041
================================================================================================
merge-output/sources/042_Unidentified-22-year-old.txt
+71
View File
@@ -0,0 +1,71 @@
================================================================================================
CASE 042 | Unidentified 22-year-old | June 6, 2018 | Italy
================================================================================================
DATABASE RECORD
id 42
date June 6, 2018
original_date June 6, 2018
year 2018
month 6
quarter 2018-Q2
victim Unidentified 22-year-old
location Milan, Italy
country Italy
scenario P2P Trade Gone Wrong
description Robbers attempt bitcoin purchase with counterfeit money, beat victims and fire gun, take 50,000 euros
kidnappings 0
violence_torture 1
drugs_alcohol 0
weapons 1
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports La Repubblica
notes setup of fake p2p trade, after 2 succesful trades, cash stolen
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Unidentified 22-year-old
**Attackers:** Unknown number of perpetrators
**Attack Method:** P2P Trade Gone Wrong
**Violence Used:** Physical assault, firearms
**Crypto Stolen:** Amount not disclosed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://milano.repubblica.it/cronaca/2018/06/07/news/milano_truffa_bitcoin_soldi_falsi_milano_arresti-198392710/
NOTES ON THIS FILE
* matched to sheet row 43: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source La Repubblica
URL https://milano.repubblica.it/cronaca/2018/06/07/news/milano_truffa_bitcoin_soldi_falsi_milano_arresti-198392710/
Origin reported_K&R sheet, row 43, column "Articles"
Length 2,309 chars
------------------------------------------------------------------------------------------------
Real Bitcoins for fake banknotes: two arrests in Milan for fraud
They tried to deceive a 22-year-old. When he discovered the scam, he was attacked.
Two people—a 33-year-old Serbian man and a 35-year-old Cuban man—were arrested for attempting to pass off a suitcase full of counterfeit money to a 22-year-old in exchange for Bitcoin. The young man realized the trick just before transferring the Bitcoin to the fake clients' accounts. When he refused to continue the transaction, he was attacked by the two men and a woman who then disappeared.
The incident occurred late yesterday afternoon. The alarm was raised around 7:15 pm by a resident of the building on Viale Abruzzi where the meeting took place. The resident called the police after hearing yelling and a gunshot (which was later revealed to be a blank pistol). Others reported finding a stack of 500-euro counterfeit bills on the sidewalk, part of the fake money used in the scam. When police arrived, they found the 22-year-old victim with a broken nose and facial injuries and the Cuban man with a head injury; both were taken to Fatebenefratelli Hospital—the victim with a 14-day prognosis and the Cuban with 7 days.
The victim explained to the officers that he had been introduced to the two buyers through a Russian friend with whom he often does business. Their first meeting took place some days before in a bar in the Quadrilatero area, where a trial transaction of 7 Bitcoins for 50,000 euros was successfully completed.
Yesterday afternoon, they met again to complete the exchange in an office on Viale Abruzzi rented for about an hour by the Cuban from a company. The scammers brought another 45,000 euros in cash as “bait.” They passed the bills under a lamp to check them, put them into a counting machine, and finally placed them in an envelope.
It was this last step that aroused the suspicion of the 22-year-old, who asked to see all the banknotes. When the group refused, he closed his computer and tried to leave the room but was attacked, and a gunshot was fired to intimidate him. During the chaos, the woman escaped, taking with her the 50,000 euros that had been given to the young man during the initial transaction. The police found the other 45,000 euros in the scammers’ car, which were intended to deceive the victim.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 042
================================================================================================
merge-output/sources/043_Synth.txt
+74
View File
@@ -0,0 +1,74 @@
================================================================================================
CASE 043 | "Synth" | June 13, 2018 | China
================================================================================================
DATABASE RECORD
id 43
date June 13, 2018
original_date June 13, 2018
year 2018
month 6
quarter 2018-Q2
victim "Synth"
location China
country China
scenario Kidnapping
description Home invasion of Skycoin architect resulted in theft of 18.88 BTC and 6,466 SKY
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 0
theft 0
life_taken 0
money_wanted (null)
coin_type (null)
reports Bitcoinist
notes kidnapped at home
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** "Synth"
**Attackers:** Unknown number of perpetrators
**Attack Method:** Kidnapping
**Violence Used:** Threats/intimidation
**Crypto Stolen:** Approximately 18.88 BTC
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://bitcoinist.com/skycoin-freezes-funds-staff-take-ceo-hostage/
NOTES ON THIS FILE
* matched to sheet row 44: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Bitcoinist
URL https://bitcoinist.com/skycoin-freezes-funds-staff-take-ceo-hostage/
Origin reported_K&R sheet, row 44, column "Articles"
Length 2,156 chars
------------------------------------------------------------------------------------------------
Allegations of criminal activity continue at Skycoin as executives freeze funds to contain fallout from a theft by the coin’s own marketing team.
18 BTC, Skycoins Stolen In ‘Burglarization’
Skycoin, which describes itself as “the most advanced blockchain platform in the world,” saw massive sell-offs this month after it emerged insider trading had taken place around the time Binance announced it would list the coin in May.
In a blog post June 18, Skycoin confirmed details of what is described as a “burglarization” involving its CEO, who is known as Synth, and members of the China-based marketing team.
Nine individuals allegedly broke into Synth’s home, taking him and his wife hostage while attempting to steal funds and technical information.
“They proceeded to hold Synth and his wife against their will for 6 hours, over the course of which they threatened, beat and robbed them,” the post reads.
BitStarz Player Lands $2,459,124 Record Win! Could you be next big winner?
Thanks to wallet security measures, the group was only able to extract 18.88 Bitcoin and 6466 skycoins during the robbery. The gang also attempted and failed to steal the design framework for the skycoin ecosystem.
Exchanges Bend To Quarantine Requests
The revelations continue the problems at Skycoin, with cryptocurrency commentators likening the insider trading scandal to Coinbase’s alleged attempts to add Bitcoin Cash functionality to its exchange in 2017.
In order to prevent stolen funds being traded, Skycoin announced it had contacted exchanges to demand asset freezes. While it remains unclear to what extent those exchanges have cooperated with their request, the decision reportedly has had a positive influence on markets.
“According to feedback from exchanges, the accounts holding stolen skycoins have been frozen, so any further impact on the market should be limited. Though some panic selling seems to be continuing, as of this writing the market price has recovered by approximately 30%,” the post states.
Skycoin once traded over $32, with the combined effect of the scandal suppressing prices to below 25 percent of that figure at press time June 19.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 043
================================================================================================
merge-output/sources/044_Unidentified.txt
+80
View File
@@ -0,0 +1,80 @@
================================================================================================
CASE 044 | Unidentified | June 19, 2018 | Austria
================================================================================================
DATABASE RECORD
id 44
date June 19, 2018
original_date June 19, 2018
year 2018
month 6
quarter 2018-Q2
victim Unidentified
location Wels, Austria
country Austria
scenario Authority Misuse
description $250,000 in cryptocurrency taken by robbers posing as postmen
kidnappings 1
violence_torture 1
drugs_alcohol 0
weapons 1
theft 1
life_taken 0
money_wanted 210000
coin_type eur
reports CT-de Unzensuriert
notes posing as postmen
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Unidentified
**Attackers:** Individuals misusing authority
**Attack Method:** Authority Misuse - victim kidnapped
**Violence Used:** Physical violence
**Crypto Stolen:** 210000 in eur
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://de.cointelegraph.com/news/gericht-in-osterreich-beginnt-verfahren-gegen-krypto-rauberbande
NOTES ON THIS FILE
* matched to sheet row 45: exact date + country, unique candidate
------------------------------------------------------------------------------------------------
ARTICLE 1
Source CT-de Unzensuriert
URL https://de.cointelegraph.com/news/gericht-in-osterreich-beginnt-verfahren-gegen-krypto-rauberbande
Origin reported_K&R sheet, row 45, column "Articles"
Length 1,678 chars
------------------------------------------------------------------------------------------------
Court in Austria Begins Trial Against Crypto Robbery Gang
In the Austrian city of Wels, five men must answer in court for a robbery and theft amounting to approximately 210,000 euros in cryptocurrency.
The mastermind is reportedly a 21-year-old Upper Austrian who planned the robbery together with his father, who has a prior criminal record and will be tried separately.
The five men involved are charged with kidnapping, aggravated robbery, coercion, and extortion. Some defendants, who mostly confessed according to their lawyers, claimed they thought it was just a debt collection action.
One man had apparently invested a five-digit sum with the robbed crypto trader and lost it. He intended to collect this "debt," but the situation escalated into what he described as a "terrible dynamic."
During the robbery, the perpetrators pretended to be postal delivery workers to gain access to the apartment. They tied the trader with tape to a chair in a storage room and also tied up the trader’s partner and their baby in the bedroom.
The victims were threatened with knives for an hour and a half to reveal access codes to various online exchanges. The men stole cryptocurrency worth 210,000 euros, which one perpetrator managed to transfer, as well as jewelry, gold coins, electronic devices, and expensive designer clothing.
This case highlights a violent home invasion linked to cryptocurrency theft using deception by false postal workers in Wels, Austria Gericht in Österreich beginnt Verfahren gegen Krypto-Räuberbande, In der österreichischen Stadt Wels müssen sich fünf Männer wegen eines Überfalls und Raubes von umgerechnet 210.000 Euro vor Gericht verantworten... .
------------------------------------------------------------------------------------------------
ARTICLE 2
Source CT-de Unzensuriert
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 45, column "Article 2"
Length 735 chars
------------------------------------------------------------------------------------------------
Wels: Turkish Bitcoin Trader Attacked by Chechen Thugs
The rise of the cryptocurrency Bitcoin is attracting more and more criminals. Recently, a trial was held in the Upper Austrian city of Wels against a five-member gang of robbers. There, two Austrian main perpetrators hired three Chechen thugs the previous year to jointly attack a Turkish Bitcoin trader. During the assault on the Bitcoin trader's apartment, his wife was dragged by her hair and abused, and threats were made to kidnap their nine-month-old baby.
Intimidated by the continued extortion and coercion, the Bitcoin trader revealed access codes to his Bitcoin wallets to the violent intruders, allowing them to withdraw approximately 210,000 euros in cryptocurrency.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 044
================================================================================================
merge-output/sources/045_Austin-Nedved.txt
+55
View File
@@ -0,0 +1,55 @@
================================================================================================
CASE 045 | Austin Nedved | July 6, 2018 | USA
================================================================================================
DATABASE RECORD
id 45
date July 6, 2018
original_date July 6, 2018
year 2018
month 7
quarter 2018-Q3
victim Austin Nedved
location Northborough, Massachussetts
country USA
scenario Swatting
description Armed home invasion of Localbitcoins trader
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 0
theft 0
life_taken 0
money_wanted (null)
coin_type (null)
reports Justice.gov
notes this seems like lawful swatting - the man was a scammer. Take out of stats
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Austin Nedved
**Attackers:** Unknown individual(s) through false police report
**Attack Method:** Swatting
**Violence Used:** Armed police response (false report)
**Crypto Stolen:** No theft completed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.justice.gov/usao-ma/pr/northborough-man-pleads-guilty-aiding-romance-and-lottery-schemes-targeting-elderly
NOTES ON THIS FILE
* matched to sheet row 46: exact match on victim + year, unique on both sides
OTHER LINKED SOURCES
[THIN] url None — extractor recovered very little; needs the WebFetch path or a site-specific rule
https://www.justice.gov/usao-ma/pr/northborough-man-pleads-guilty-aiding-romance-and-lottery-schemes-targeting-elderly
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 045
================================================================================================
merge-output/sources/046_Nicholas-Truglia.txt
+80
View File
@@ -0,0 +1,80 @@
================================================================================================
CASE 046 | Nicholas Truglia | September 7, 2018 | USA
================================================================================================
DATABASE RECORD
id 46
date September 7, 2018
original_date September 7, 2018
year 2018
month 9
quarter 2018-Q3
victim Nicholas Truglia
location New York, New York
country USA
scenario Malicious Invitation - SocialEng
description Friends accused of torturing pal to steal his cryptocurrency
kidnappings 0
violence_torture 1
drugs_alcohol 1
weapons 0
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports NY post
notes his "friends" tortured him and stole a laptop, a small pendrive like device and a phone
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Nicholas Truglia
**Attackers:** Known associate(s) who betrayed victim
**Attack Method:** Malicious Invitation - SocialEng
**Violence Used:** Physical violence, drugging
**Crypto Stolen:** Amount not disclosed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://nypost.com/2018/11/06/friends-accused-of-torturing-pal-to-steal-his-cryptocurrency/
NOTES ON THIS FILE
* matched to sheet row 47: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source NY post
URL https://nypost.com/2018/11/06/friends-accused-of-torturing-pal-to-steal-his-cryptocurrency/
Origin reported_K&R sheet, row 47, column "Articles"
Length 2,988 chars
------------------------------------------------------------------------------------------------
Friends accused of torturing pal to steal his cryptocurrency
These guys are accused of taking a “bit” out of crime.
A group of young professional men ransacked their pal’s luxury apartment after a night of drinking and forced him to cough up his cryptocurrency account login information, the Manhattan District Attorney’s Office charges in a new complaint.
Defendant Stephen Orso, 25, allegedly demanded that Nicholas Truglia “provide him with login information for his cryptocurrency accounts while holding his head underwater in the bathtub, punching him in the stomach and throwing hot wax on him,” court papers charge.
Cryptocurrencies, like bitcoin, serve as a digital medium of exchange and payment.
Orso, the son of a wealthy venture capitalist, and three pals, David Leica, 19, Steven Dorn, 29, and Chris David, 25, escorted a soused Truglia to his high-rise apartment on West 42nd Street at about 2:50 a.m. on Sept. 7, according to a criminal complaint.
Surveillance video shows the crew leaving about two hours later, and David appears “to be concealing a rectangular object under his sweatshirt consistent with a laptop computer,” the papers allege.
Truglia, 27, told cops he woke up and realized his laptop, two mobile phones and a thumb drive containing his cryptocurrency account information were missing.
The complaint doesn’t say whether the men, who flaunt their extravagant lifestyles in online posts, hacked into Truglia’s cryptocurrency account or stole any funds. Nor does it say which currency network he uses.
The next day, Truglia pinged his iPhone and it allegedly showed up in the vicinity of an apartment shared by the defendants.
Leica allegedly sent Truglia’s iPhone to him in an Uber the next day and David allegedly returned the laptop, which was splattered in wax, court papers say.
Defense lawyer Stacey Richman, who represents all four defendants, said that the accusations are outright falsehoods and that Truglia has since recanted.
She said that her clients were only trying to do the right thing by “helping a person who had overimbibed” get home from the club.
“For his own safety, they stepped up,” she said.
“I provided audio to the district attorney’s office wherein the complainant admits these allegations are false,” she maintained.
“It’s disappointing that our standard of journalism does not permit the innocent to have their day in court and slanders them upon accusation.”
The jet-setting defendants’ social media accounts show them consorting with celebrities, including bad-boy quarterback Johnny Manziel and superstar Knicks player Kristaps Porzingis.
On Instagram, Orso, Leica and Dorn are shown smiling in front of a private jet and in dozens of photographs while posing with a string of stunning models at clubs and red-carpet events.
The defendants are each charged with one count of second-degree burglary.
The four men were all released without bail. They are due back in court March 14 to find out whether they’ve been indicted.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 046
================================================================================================
merge-output/sources/048_Andrew.txt
+68
View File
@@ -0,0 +1,68 @@
================================================================================================
CASE 048 | Andrew ______ | November 16, 2018 | South Africa
================================================================================================
DATABASE RECORD
id 48
date November 16, 2018
original_date November 16, 2018
year 2018
month 11
quarter 2018-Q4
victim Andrew ______
location Lanseria, South Africa
country South Africa
scenario Malicious Invitation - SocialEng
description Bitcoin trader drugged, beaten, and tortured before transferring BTC to attackers
kidnappings 1
violence_torture 1
drugs_alcohol 1
weapons 0
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports FM
notes (null)
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Andrew ______
**Attackers:** Known associate(s) who betrayed victim
**Attack Method:** Malicious Invitation - SocialEng - victim kidnapped
**Violence Used:** Torture, physical assault, drugging
**Crypto Stolen:** Amount not disclosed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.financemagnates.com/cryptocurrency/news/south-africa-man-tortured-for-bitcoins-in-intensive-care/
NOTES ON THIS FILE
* matched to sheet row 49: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source FM
URL https://www.financemagnates.com/cryptocurrency/news/south-africa-man-tortured-for-bitcoins-in-intensive-care/
Origin reported_K&R sheet, row 49, column "Articles"
Length 1,143 chars
------------------------------------------------------------------------------------------------
South Africa: Man Tortured for Bitcoins, in Intensive Care
The victim was burned with a hot iron and lost Bitcoin worth hundreds of thousands of dollars.
A Bitcoin trader in South Africa was lured to a residence under false pretences and set upon by five individuals who wanted his cryptocurrency. The crime took place in Soweto, a township in Johannesburg.
A hot iron
According to local news source Soweto Urban, "Andrew", of Lanseria, was invited to give a presentation at a private residence by a man he had met on Facebook, and later in person. When he got there, someone came up behind him and knocked him out by way of a chemical-soaked cloth to the face.
He awoke in a different house, surrounded by five individuals. These stripped him, assaulted him, and burned him with a hot iron, demanding to know his account details. They also threatened to kill him.
He transferred Bitcoin worth approximately 900,000 rand ($65,984) to the assailants, who also robbed him of two mobile phones, two laptops, 3,000 rand in cash, and then dumped him blindfolded on the side of a road.
Andrew is currently in intensive care being treated for burns.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 048
================================================================================================
merge-output/sources/049_13y-old-boy.txt
+76
View File
@@ -0,0 +1,76 @@
================================================================================================
CASE 049 | 13y old boy | January 17, 2019 | South Africa
================================================================================================
DATABASE RECORD
id 49
date January 17, 2019
original_date January 17, 2019
year 2019
month 1
quarter 2019-Q1
victim 13y old boy
location Mpumalanga
country South Africa
scenario Kidnapping
description 13 y old boy kidnapped for crypto ransom, second kidnapping of a girl foiled by the police.
kidnappings 1
violence_torture 0
drugs_alcohol 0
weapons 0
theft 0
life_taken 0
money_wanted R1.5m
coin_type BTC
reports TimesLive
notes not in lopps list, second attempt on a girl foiled by bystanders because she screamed for help
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** 13y old boy
**Attackers:** Unknown number of perpetrators
**Attack Method:** Kidnapping for ransom
**Violence Used:** Threats/intimidation
**Crypto Stolen:** R1.5m in BTC
**Status:** Attack prevented/foiled
LINKED SOURCES
[url] https://www.timeslive.co.za/news/south-africa/2019-01-17-mpumalanga-police-arrest-two-bitcoin-kidnapping-suspects/
NOTES ON THIS FILE
* matched to sheet row 50: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source TimesLive
URL https://www.timeslive.co.za/news/south-africa/2019-01-17-mpumalanga-police-arrest-two-bitcoin-kidnapping-suspects/
Origin reported_K&R sheet, row 50, column "Articles"
Length 2,750 chars
------------------------------------------------------------------------------------------------
Mpumalanga police arrest two Bitcoin kidnapping suspects
January 17, 2019 at 08:17 amThe suspects, both aged 37 were part of targeted suspects linked to multiple cases of armed robbery, carjacking and kidnapping within the Sekhukhune district. (File/Stock Photo)
Mpumalanga police, after months of hard work, have arrested two people alleged to be behind the kidnapping of a Witbank teenager and the attempted kidnapping of a girl from Middelburg.
The incidents happened in May and August 2018.
In the Witbank case, the suspects demanded ransom in the form of Bitcoins for the safe return of the 13-year-old boy. Police suspect a similar plan in the second case, had the abduction succeeded. 
"These cases were the first of their kind in Mpumalanga and a task team comprising of different units within the South African Police Service was immediately established by police management to investigate this matter," said Brigadier Leonard Hlathi.
"The dedicated formations left no stone unturned in their investigation, knitting all clues and eventually their efforts yielded positive results as the suspects were arrested thereafter at different locations," he added.
The suspects behind the kidnappings in the neighbouring towns are men aged 30 and 31. One was nabbed in November in Germiston in Gauteng, while the second was arrested in Ladysmith, KwaZulu-Natal, on December 30.
The first victim was the Witbank boy, who was snatched near his home on May 20 as he walked back from a nearby spaza shop with a friend. 
Part of the brazen kidnapping, which happened in broad daylight, was captured on a neighbour's CCTV camera.
TimesLIVE saw the footage, which showed the moments the boy was forced into a silver-coloured Toyota Corolla‚ which sped off with him inside, while his friend stood in disbelief.
After his parents rushed to the police station to report the kidnapping, they returned to find a ransom note in their yard. The amount demanded was the equivalent of R1.5m.
A few days later, he was reunited with his family unharmed. Police had not disclosed whether any ransom had been paid for his safe return.
"A few months later, on 21 August 2018, the suspects attempted to kidnap a 13-year-old girl in Aerorand, Middelburg," said Hlathi.
"They dragged her into their vehicle, a VW Polo, but the girl shouted for help and was heard by a group of people working nearby, who swiftly came to her aid and helped her escape.
"The suspects fled the scene, thereafter leaving their vehicle abandoned with their belongings inside. During the investigation, it was established that they (suspects) had the same intentions as in the first case," Hlathi said.
The two suspects appeared in court on Tuesday and were granted R1,000 bail each, Hlathi said.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 049
================================================================================================
merge-output/sources/050_Tjeerd-H.txt
+69
View File
@@ -0,0 +1,69 @@
================================================================================================
CASE 050 | Tjeerd H. | February 10, 2019 | Netherlands
================================================================================================
DATABASE RECORD
id 50
date February 10, 2019
original_date February 10, 2019
year 2019
month 2
quarter 2019-Q1
victim Tjeerd H.
location Drouwenerveen, Netherlands
country Netherlands
scenario Authority Misuse
description Bitcoin trader tortured with drill
kidnappings 1
violence_torture 1
drugs_alcohol 0
weapons 1
theft 0
life_taken 0
money_wanted (null)
coin_type (null)
reports Independent
notes (null)
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Tjeerd H.
**Attackers:** Individuals misusing authority
**Attack Method:** Authority Misuse - victim kidnapped
**Violence Used:** Torture, torture with power tools
**Crypto Stolen:** No theft completed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.the-independent.com/tech/bitcoin-robbery-torture-cryptocurrency-netherlands-a8807986.html
NOTES ON THIS FILE
* matched to sheet row 51: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Independent
URL https://www.the-independent.com/tech/bitcoin-robbery-torture-cryptocurrency-netherlands-a8807986.html
Origin reported_K&R sheet, row 51, column "Articles"
Length 1,037 chars
------------------------------------------------------------------------------------------------
Bitcoin trader brutally tortured with drill in cryptocurrency robbery
Criminals disguised as police attacked the victim for an hour in front of his four-year-old daughter
Police in the Netherlands are investigating the brutal torture of a bitcoin trader, whose home was raided by criminals looking for cryptocurrency.
Three robbers disguised as police entered the victim's home in Drenthe and attacked him with a drill in front of his four-year-old daughter, Dutch publication De Telegraaf reported.
The hour-long ordeal also involved the victim being threatened with firearms, before the perpetrators fled in an escape vehicle. The digital nature of bitcoin and other cryptocurrencies mean long and complex passwords – or private keys – are required to access assets and transfer them to another digital wallet.
Police did not reveal the identity of the victim but it is not believed any cryptocurrency was stolen during the raid.
A spokesperson for Northern Netherlands Police told The Independent that the investigation is ongoing.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 050
================================================================================================
merge-output/sources/051_Costcutters.txt
+98
View File
@@ -0,0 +1,98 @@
================================================================================================
CASE 051 | Costcutters | March 12, 2019 | UK
================================================================================================
DATABASE RECORD
id 51
date March 12, 2019
original_date March 12, 2019
year 2019
month 3
quarter 2019-Q1
victim Costcutters
location Far Cotton, Northampton, England
country UK
scenario Armed Robbery in Public Space
description Bitcoin machine stolen during robbery
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 0
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports Northampton Chronicles
notes they threatened the employees with a machete
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Costcutters
**Attackers:** Unknown number of perpetrators
**Attack Method:** Armed Robbery in Public Space
**Violence Used:** Threats/intimidation
**Crypto Stolen:** Amount not disclosed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.northamptonchron.co.uk/news/masked-men-with-weapons-rob-northampton-shop-for-bitcoin-machine-73035
NOTES ON THIS FILE
* matched to sheet row 52: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Northampton Chronicles
URL https://www.northamptonchron.co.uk/news/masked-men-with-weapons-rob-northampton-shop-for-bitcoin-machine-73035
Origin reported_K&R sheet, row 52, column "Articles"
Length 1,209 chars
------------------------------------------------------------------------------------------------
Bitcoin machine stolen in Far Cotton robbery – witness appeal
March 15, 2019
Send by emailSend by email
Officers investigating the theft of a device which turns cash into digital currency are appealing for witnesses to come forward.
At around 8.30pm on Tuesday, March 12, three men went to the Costcutter shop on St Leonard’s Road, in Far Cotton, Northampton, where one waited outside.
The other two went inside, where one threatened staff with a curved machete while the other smashed a Bitcoin machine off the shop wall with a sledgehammer.
The offenders then left the shop with the machine, walking away along Haines Road and Euston Road.
All the men wore face coverings and gloves. The one with the machete is described as wearing a black balaclava, black puffer parka jacket, blue jogging bottoms and light coloured trainers.
The man with the sledgehammer wore a black balaclava, grey/green puffer style parka jacket, black jogging bottoms and black trainers.
The third man wore a grey puffer style parka jacket and had a grey face covering.
Anyone who witnessed the robbery, saw the men in the area at the time or who has information about the incident is asked to call Northamptonshire Police on 101.
------------------------------------------------------------------------------------------------
ARTICLE 2
Source Northampton Chronicles
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 52, column "Article 2"
Length 1,500 chars
------------------------------------------------------------------------------------------------
Robbers in Northampton threatened a shopkeeper with a machete for a device that turns cash into digital currency.
At around 8.30pm on Tuesday (March 12) three men went to the Costcutter shop on St Leonard’s Road, in Far Cotton, leaving one person waiting outside, Northamptonshire Police today confirmed.
Former racing driver given six-month driving ban after going 96mph along Northants A-road
Former racing driver given six-month driving ban after going...
News
Developer submits plans to build next 400 homes on huge housing estate on edge of Northampton
Developer submits plans to build next 400 homes on huge hous...
News
Two men then went inside, one threatened staff with a curved machete while the other smashed a Bitcoin machine off the shop wall with a sledgehammer.
The offenders then left the shop with the machine, walking away along Haines Road and Euston Road.
A spokeswoman for Northamptonshire Police said: "All the men wore face coverings and gloves. The one with the machete is described as wearing a black balaclava, black puffer parka jacket, blue jogging bottoms and light coloured trainers.
"The man with the sledgehammer wore a black balaclava, grey/green puffer style parka jacket, black jogging bottoms and black trainers.
"The third man wore a grey puffer style parka jacket and had a grey face covering."
Anyone who witnessed the robbery, saw the men in the area at the time, or who has information about the incident is asked to call Northamptonshire Police on 101.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 051
================================================================================================
merge-output/sources/052_Undisclosed.txt
+77
View File
@@ -0,0 +1,77 @@
================================================================================================
CASE 052 | Undisclosed | May 14, 2019 | Norway
================================================================================================
DATABASE RECORD
id 52
date May 14, 2019
original_date mayo 14, 2019
year 2019
month 5
quarter 2019-Q2
victim Undisclosed
location Oslo, Norway
country Norway
scenario Home Invasion
description Bitcoin millionaire escapes armed home invader by jumping off balcony
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 1
theft 0
life_taken 0
money_wanted (null)
coin_type (null)
reports tv2
notes the victim escaped jumping off the balcony from a 2nd floor
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Undisclosed
**Attackers:** Unknown number of perpetrators
**Attack Method:** Home Invasion
**Violence Used:** Threats/intimidation
**Crypto Stolen:** No theft completed
**Status:** Suspects fled the scene
LINKED SOURCES
[url] https://www.tv2.no/nyheter/innenriks/bitcoin-millionaer-oppsokt-av-mann-med-hagle-hoppet-fra-balkongen/10828524/
NOTES ON THIS FILE
* matched to sheet row 53: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source tv2
URL https://www.tv2.no/nyheter/innenriks/bitcoin-millionaer-oppsokt-av-mann-med-hagle-hoppet-fra-balkongen/10828524/
Origin reported_K&R sheet, row 53, column "Articles"
Length 1,464 chars
------------------------------------------------------------------------------------------------
Bitcoin millionaire confronted by man with shotgun – jumped from balcony
The multi-millionaire stared down the barrel of a sawed-off shotgun when he opened the door.
The incident happened in the afternoon of May 14 this year. The millionaire in his 40s was at home in an apartment building in Oslo when the doorbell rang. When he opened the door, a man stood outside holding a sawed-off shotgun. The robber forced his way into the apartment and said, "Get down, or I’ll shoot," according to charges filed by the Oslo Public Prosecutor’s Office.
The robber did not get any valuables because the millionaire managed to escape. He ran out onto the balcony and jumped from the second floor, landing on the street. It is unknown whether he was injured during the escape.
"We do not wish to comment on this case," said Pål Sverre Hernæs, the victim’s legal counsel.
The victim has worked with cryptocurrency for nearly ten years. The accounts from the man’s company show he is worth over 100 million Norwegian kroner. He is listed as the CEO and owner of the board. He has previously appeared in public due to his success in making money with cryptocurrency.
The accused man is defended by lawyer Benedikte Johansen.
"My client does not admit guilt following the charges but beyond that, I do not wish to comment," she said.
The case will be prosecuted by police attorney Ellen Karine Aas in court on October 17 and 18. TV 2 has not succeeded in contacting her.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 052
================================================================================================
merge-output/sources/053_Luftan-Shaikh-Mohammad-Shazad-Malang-Sha.txt
+68
View File
@@ -0,0 +1,68 @@
================================================================================================
CASE 053 | Luftan Shaikh, Mohammad Shazad, Malang Shah | June 30, 2019 | India
================================================================================================
DATABASE RECORD
id 53
date June 30, 2019
original_date June 30, 2019
year 2019
month 6
quarter 2019-Q2
victim Luftan Shaikh, Mohammad Shazad, Malang Shah
location Jaipur, Rajasthan, India
country India
scenario P2P Trade Gone Wrong
description Criminal Gang Abducts & Tortures Cryptocurrency Traders, Demands 80 BTC Ransom
kidnappings 1
violence_torture 1
drugs_alcohol 0
weapons 1
theft 0
life_taken 0
money_wanted (null)
coin_type (null)
reports Newsweek
notes two weeks in high rise building, no family contact
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Luftan Shaikh, Mohammad Shazad, Malang Shah
**Attackers:** Gang/organized group
**Attack Method:** P2P Trade Gone Wrong - victim kidnapped
**Violence Used:** Torture
**Crypto Stolen:** No theft completed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.newsweek.com/cryptocurrency-traders-abducted-tortured-india-criminal-gang-arrested-bitcoin-ransom-1449274
NOTES ON THIS FILE
* matched to sheet row 54: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Newsweek
URL https://www.newsweek.com/cryptocurrency-traders-abducted-tortured-india-criminal-gang-arrested-bitcoin-ransom-1449274
Origin reported_K&R sheet, row 54, column "Articles"
Length 2,199 chars
------------------------------------------------------------------------------------------------
Criminal Gang Abducts and Tortures Cryptocurrency Traders, Demands Massive Bitcoin Ransom
A criminal gang operating in India kidnapped and tortured cryptocurrency traders in recent weeks before demanding 80 bitcoins as ransom, police say.
The ordeal—which lasted more than two weeks for the victims—came to an end yesterday as seven people linked to the gang were arrested, the Hindustan Timesnewspaper reported. Law enforcement in Jaipur city said the police operation on Sunday lasted 13 hours.
Three men had been held captive for 15 days inside a high-rise building and were beaten or tortured, deputy commissioner of police (DCP) Vikas Sharma told local media. The individuals were named as Luftan Shaikh, 19, Mohammad Shazad, 36 and Malang Shah, 44. 
"The gang kidnapped Shaikh and Shazad, two bitcoin traders, and demanded 80 bitcoin worth ₹8 crore ($1.2 million). Shah was kidnapped two days later. The gang demanded ₹10 lakh ($15,000) from his family members," the deputy commissioner said in a statement. The price of digital currency bitcoin fluctuates daily, which likely explains the difference in exchange rate.
Police said officers were alerted to the scheme after a 20-minute chase resulted in the arrest of a suspect who was seen carrying a pistol in Bhakrota, which is a residential area in Jaipur. The man told officers about the kidnapping and gave up the location of the apartment building.
India-based media outlet NDTV reported that the cryptocurrency traders had been lured into the region by gang members who claimed to be selling bitcoins at a low price.
"[The gang] wanted to extort money from the trio. They held them hostage in the flat and had threatened to kill them if the demands were not met," NDTV quoted Sharma as saying. "Not even their family members were aware of the abduction. The victims had lost all hope because they had no access to anyone." Police said they seized guns and SUVs from the criminals.The suspects were identified by local media as Jitendra Kumar, 21, Deepak Kumar, 22, Anupam Soni, 19, Pawan Kumar, 20, Bhawani Singh, 19, Lokendra Singh, 24 and Rahul Kumar, 19. Lokendra Singh is from Rajasthan and the others are originally from Haryana. 
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 053
================================================================================================
merge-output/sources/054_Bitcoin-Exchange.txt
+70
View File
@@ -0,0 +1,70 @@
================================================================================================
CASE 054 | Bitcoin Exchange | July 15, 2019 | UK
================================================================================================
DATABASE RECORD
id 54
date July 15, 2019
original_date July 15, 2019
year 2019
month 7
quarter 2019-Q3
victim Bitcoin Exchange
location Sparkhill, Birmingham, England
country UK
scenario Armed Robbery in Public Space
description Masked raiders hold up Bitcoin Exchange in front of dozens of witnesses
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 1
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports CT
notes cash from ATMs
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Bitcoin Exchange
**Attackers:** Unknown number of perpetrators
**Attack Method:** Armed Robbery in Public Space
**Violence Used:** Threats/intimidation
**Crypto Stolen:** Amount not disclosed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://cointelegraph.com/news/gang-of-masked-men-raid-bitcoin-embassy-in-birmingham
NOTES ON THIS FILE
* matched to sheet row 55: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source CT
URL https://cointelegraph.com/news/gang-of-masked-men-raid-bitcoin-embassy-in-birmingham
Origin reported_K&R sheet, row 55, column "Articles"
Length 1,217 chars
------------------------------------------------------------------------------------------------
Gang of Masked Men Raid Bitcoin Exchange in Birmingham
Police are looking for a gang of masked men who raided a Bitcoin exchange in the English city of Birmingham.
A gang of masked men have raided a Bitcoin (BTC) exchange in the English city of Birmingham, sparking a police investigation.
Local Facebook page Brumz Updates posted footage of the burglars ransacking the building as sirens blared on July 15.
Witnesses look on helplessly as the robbery unfolds — and seconds later, the gang speed away from the scene in a waiting car.
West Midlands Police has launched an investigation, but have confirmed that nothing of value was stolen from the business. 
According to the Daily Mail, the thieves had attempted to steal a Bitcoin ATM using a rope attached to their car.
The owner of the establishment, Adam Gramowski, told the newspaper that he believes the robbers were after cash inside the machine rather than cryptocurrency, adding:
“There are no BTC [Bitcoin] in the machine, they are being sent directly from our server.”
Violent raids targeting Bitcoin businesses and traders are becoming more common. In February, a Bitcoin trader was attacked in his own home by a group of robbers disguised as the police.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 054
================================================================================================
merge-output/sources/055_Unidentified.txt
+70
View File
@@ -0,0 +1,70 @@
================================================================================================
CASE 055 | Unidentified | July 26, 2019 | Austria
================================================================================================
DATABASE RECORD
id 55
date July 26, 2019
original_date July 26, 2019
year 2019
month 7
quarter 2019-Q3
victim Unidentified
location Wels, Austria
country Austria
scenario Home Invasion
description Man raided in office 
kidnappings 1
violence_torture 0
drugs_alcohol 0
weapons 1
theft 1
life_taken 0
money_wanted unknown
coin_type (null)
reports Chronik
notes late evening office invasion, armed with pistol knocked on office door, victim opened, they rushed in demanded crypto and other valuables
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Unidentified
**Attackers:** Unknown number of perpetrators
**Attack Method:** Home Invasion - victim kidnapped
**Violence Used:** Threats/intimidation
**Crypto Stolen:** unknown
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://ooe.orf.at/stories/3006096/
NOTES ON THIS FILE
* matched to sheet row 56: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Chronik
URL https://ooe.orf.at/stories/3006096/
Origin reported_K&R sheet, row 56, column "Articles"
Length 1,070 chars
------------------------------------------------------------------------------------------------
Man Assaulted in Office
Unknown assailants attacked a 30-year-old man in his office in Wels in the evening. According to the State Criminal Investigation Office, the assault followed the pattern of a home invasion.
The perpetrators relied on the element of surprise. They rang the office door of the 30-year-old late in the evening. The man opened the door and was forced into the office by masked men. Armed with a pistol and a rubber truncheon, they demanded money and cryptocurrencies (internet money, ed.).
Bound with Cable and Duct Tape
The victim handed over cash and then had to transfer cryptocurrencies from his computer. The amount is not yet known. The two men then bound the 30-year-old with cable and duct tape, leaving him in his office. The man later managed to free himself with great effort and notify the police. He suffered a shock.
The State Criminal Investigation Office has initiated investigations. In similar cases, investigators recently gained initial leads through the cryptocurrencies, as these transactions can usually be traced online.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 055
================================================================================================
merge-output/sources/056_Abdul-Shakoor.txt
+76
View File
@@ -0,0 +1,76 @@
================================================================================================
CASE 056 | Abdul Shakoor | August 26, 2019 | India
================================================================================================
DATABASE RECORD
id 56
date August 26, 2019
original_date August 26, 2019
year 2019
month 8
quarter 2019-Q3
victim Abdul Shakoor
location Dehradun, India
country India
scenario Kidnapping
description Kingpin of Kerala bitcoin scam murdered in Dehradun
kidnappings 1
violence_torture 1
drugs_alcohol 0
weapons 1
theft 0
life_taken 1
money_wanted (null)
coin_type (null)
reports NDTV
notes boss of crypto investment scam team beaten to death by his own mates, after pretending his wallet with company funds got hacked
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Abdul Shakoor
**Attackers:** Unknown number of perpetrators
**Attack Method:** Kidnapping for ransom
**Violence Used:** Murder/homicide
**Crypto Stolen:** No theft completed
**Status:** Victim deceased; investigation ongoing
LINKED SOURCES
[url] https://www.ndtv.com/india-news/kingpin-of-bitcoin-scam-worth-rs-485-crore-murdered-by-associates-in-dehradun-police-2093504
NOTES ON THIS FILE
* matched to sheet row 57: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source NDTV
URL https://www.ndtv.com/india-news/kingpin-of-bitcoin-scam-worth-rs-485-crore-murdered-by-associates-in-dehradun-police-2093504
Origin reported_K&R sheet, row 57, column "Articles"
Length 2,529 chars
------------------------------------------------------------------------------------------------
Kingpin Of Bitcoin Scam Worth Rs 485 Crore Murdered In Dehradun: Police
The attackers tortured Abdul Shakoor till he fell unconscious and left the body at the emergency ward of a private hospital in Dehradun on Thursday night before fleeing. They were arrested on Friday, the officer said.
Kingpin of a bitcoin scam worth Rs 485 crore beaten to death in Dehradun: Cops (Representational Image) Dehradun:
The kingpin of a bitcoin scam worth Rs 485 crore that had its roots in Kerala was beaten to death by five of his associates in Dehradun, a senior police official said this morning.
The attackers tortured Abdul Shakoor till he fell unconscious and left the body at the emergency ward of a private hospital in Dehradun on Thursday night before fleeing. They were arrested on Friday, the officer said.
"The scam has its roots in Kerala and the kingpin, Abdul Shakoor, as well as his associates hail from the southern state," senior police officer in Dehradun Arun Mohan Joshi said. 
The police officer added that a search was underway to arrest five more close aides of Abdul Shakoor - Ashique, Arshad, Yasin, Rehaab and Muneef.
Giving details, the police officer said, "(Abdul) Shakoor ran a bitcoin business and had allegedly collected around Rs 485 crore for investing in crypto-currency from residents of Pandikkad, Manjeri and Malappuram in Kerala."
"Shakoor's animosity with his team members started when he allegedly suffered losses in the business and escaped to Dehradun as people who had invested in bitcoins through his associates began chasing them for their money," police said.
"When his associates asked him about the money, Shakoor allegedly told them that his bitcoin account had been hacked. Not convinced, his associates hatched a plan to retrieve the password of his account.
They arrived in Dehradun, where Shakoor had been living in a rented house, and pressured him for the password. As Shakoor refused to give in, they began torturing him as they believed Shakoor still had hundreds of crores in his account and was deceiving them," police official Arun Joshi added.
"The torture continued, ultimately leading to Shakoor's death," police officials said, adding that the body had multiple injury marks.
"His killers took him to two hospitals in the city as he fell unconscious but when doctors at both facilities declared him dead, they fled leaving his body behind," Police officer Arun Joshi said.
"The accused are being interrogated even as the search for five others is on," police officials said. 
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 056
================================================================================================
merge-output/sources/057_Simply-Delicious-Food-Market.txt
+68
View File
@@ -0,0 +1,68 @@
================================================================================================
CASE 057 | Simply Delicious Food Market | November 19, 2019 | USA
================================================================================================
DATABASE RECORD
id 57
date November 19, 2019
original_date November 19, 2019
year 2019
month 11
quarter 2019-Q4
victim Simply Delicious Food Market
location Vernon, British Columbia
country USA
scenario Armed Robbery in Public Space
description Thieves break into BTM
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 0
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports YT, Castanet
notes robbers at night, took cash from bATM
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Simply Delicious Food Market
**Attackers:** Unknown number of perpetrators
**Attack Method:** Armed Robbery in Public Space
**Violence Used:** Threats/intimidation
**Crypto Stolen:** Amount not disclosed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.castanet.net/cgi-bin2/stats/clickcounter.cgi?id=274789&cid=414202&region=700
NOTES ON THIS FILE
* matched to sheet row 58: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source YT, Castanet
URL https://www.castanet.net/cgi-bin2/stats/clickcounter.cgi?id=274789&cid=414202&region=700
Origin reported_K&R sheet, row 58, column "Articles"
Length 1,096 chars
------------------------------------------------------------------------------------------------
Grocery store bitcoin heist
The phrases "grocery store" and "bitcoin robbery" don't usually go together, but that's the case here.
Two masked men broke into Simply Delicious Food Market and ran off with cash stolen from a bitcoin ATM. The robbery happened at about 4 a.m. Tuesday morning.
Police were on the scene 15 minutes after the alarm was triggered, but just missed the thieves escaping. But there is some evidence to work with.
"Our security camera caught at least one of their cars drive away, which was a grey Nissan Sentra," says store owner Troy Roland. "The police were also able to catch their license plate too."
Roland says that Simply delicious won't keep the bitcoin ATM in the store after the robbery.
The suspects didn't take anything else in the store, they headed straight for the ATM. Roland says it looked like they knew what they were doing, there was no hesitation on their part.
The investigation is still ongoing and anyone with information can call Vernon North Okanagan RCMP at 250-545-7171. You can also contact Crime Stoppers at 1-800-222-8477 or on their website.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 057
================================================================================================
merge-output/sources/058_Anne-Elisabeth-Hagen.txt
+100
View File
@@ -0,0 +1,100 @@
================================================================================================
CASE 058 | Anne-Elisabeth Hagen | October 31, 2018 | Norway
================================================================================================
DATABASE RECORD
id 58
date October 31, 2018
original_date nan
year 2018
month 10
quarter 2018-Q4
victim Anne-Elisabeth Hagen
location Oslo, Norway
country Norway
scenario Kidnapping
description Wife of businessman kidnapped for ransom in MNR. Suspicion that the kidnapping was to cover a murder.
kidnappings 1
violence_torture 1
drugs_alcohol 0
weapons 0
theft 0
life_taken 1
money_wanted €9m
coin_type MNR
reports TheGuardian, G2
notes not in lopps list
has_processed_date 0
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Anne-Elisabeth Hagen
**Attackers:** Unknown number of perpetrators
**Attack Method:** Kidnapping for ransom
**Violence Used:** Murder/homicide
**Crypto Stolen:** €9m in MNR
**Status:** Victim deceased; investigation ongoing
LINKED SOURCES
[url] https://www.theguardian.com/world/2019/jun/26/police-say-abducted-norwegian-woman-anne-elisabeth-hagen-probably-murdered?utm_term=Autofeed&CMP=twt_gu&utm_medium=&utm_source=Twitter#Echobox=1561567155
NOTES ON THIS FILE
* matched to sheet row 59: identical source URL plus corroborating article text, approved
------------------------------------------------------------------------------------------------
ARTICLE 1
Source TheGuardian, G2
URL https://www.theguardian.com/world/2019/jun/26/police-say-abducted-norwegian-woman-anne-elisabeth-hagen-probably-murdered?utm_term=Autofeed&CMP=twt_gu&utm_medium=&utm_source=Twitter#Echobox=1561567155
Origin reported_K&R sheet, row 59, column "Articles"
Length 1,699 chars
------------------------------------------------------------------------------------------------
Police say abducted Norwegian woman probably murdered
This article is more than 6 years old
Investigator says kidnapping possibly staged to disguise killing of Anne-Elisabeth Hagen, wife of wealthy investor
AFP in OsloWed 26 Jun 2019 17.12 BSTShare
The wife of a wealthy Norwegian businessman who disappeared nearly eight months ago was probably killed and the murder made to look like a kidnapping, police have said.
Anne-Elisabeth Hagen, whose husband, Tom Hagen, is a real estate investor and energy magnate, went missing from their home in Lørenskog, near Oslo, on 31 October.
The Verdens Gang daily reported that the presumed abductors had demanded €9m (£8m) in the cryptocurrency Monero, a digital cash system that is especially hard to trace. A ransom note had been found at the couple’s home. Police at the time refused to confirm the sum but said they had advised the family not to pay.
Online contacts with the presumed kidnappers earlier in the investigation were unable to confirm that those people were holding Hagen, 68, or that she was still alive.
Tommy Brøske, the lead investigator, told a news conference: “As a result, our main hypothesis has been modified – Anne-Elisabeth was killed. There may have been an attempt to disguise the murder as a kidnapping.”.
He added that the supposed abductors’ lack of a desire to “bank the ransom” was one of the other key factors behind the conclusion. He declined to state whether police had any suspects in the case.
The family’s lawyer, Svein Holden, told reporters he viewed the crime as a “kidnapping that turned into a possible murder”.
Tom Hagen, in his late 60s, has an estimated fortune of €174m, according to the magazine Kapital.
------------------------------------------------------------------------------------------------
ARTICLE 2
Source TheGuardian, G2
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 59, column "Article 2"
Length 2,376 chars
------------------------------------------------------------------------------------------------
Norwegian millionaire's wife likely to have been kidnapped, say police
This article is more than 6 years old
£8m ransom reportedly asked for release of 68-year-old Anne-Elisabeth Falkevik Hagen
Agence France-PresseWed 9 Jan 2019 12.42 GMT
The wife of a Norwegian multimillionaire missing for 10 weeks has probably been kidnapped and a ransom has been demanded for her release, police have said.
Married to a real estate and energy magnate, Anne-Elisabeth Falkevik Hagen, 68, disappeared on 31 October, police said.
“A ransom demand and serious threats have been issued,” Insp Tommy Brøske told reporters.
“Our main theory is that the victim was kidnapped by unidentified perpetrators at her home” in Lørenskog, about 12 miles (20km) from Oslo, he said, adding that police had from the beginning examined several possible theories about her disappearance.
Anne-Elisabeth Falkevik Hagen. Her husband, Tom Hagen, is Norway’s 172nd richest man. Photograph: Police handout/AP
Police have received no proof that the woman is alive “but we haven’t received any indication that she isn’t alive either”, Brøske said.
The cautious nature of the remarks could be an indication that police have not received proof that Hagen was indeed being held by the people demanding the ransom. Police said they had no suspects at this stage.
According to the daily newspaper Verdens Gang, the ransom demand was for €9m (£8m) in the cryptocurrency Monero.
Investigators refused to confirm the amount but said they advised the family not to pay the purported kidnappers.
Such events are extremely rare in the Scandinavian country, which enjoys a generally low crime rate.
Police inspector Tommy Brøske at a press conference in Lillestrom on Wednesday. Photograph: Ole Berg-Rusten/EPA
Police have been investigating the case discreetly for several weeks but decided to make it public in the hope someone would come forward with information, Brøske said.
Brøske said investigators had had “very limited” contacts with the purported kidnappers online, but refused to disclose the date of the most recent contact.
The missing woman’s husband, Tom Hagen, also 68, is Norway’s 172nd richest man, according to the magazine Kapital, with an estimated fortune of 1.7bn kroner (£156m).
The real estate investor owns 70% of the electricity company Elkraft, which he co-founded in 1992, Norwegian media reported.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 058
================================================================================================
merge-output/sources/059_Iroro-Wisdom-Ovie.txt
+109
View File
@@ -0,0 +1,109 @@
================================================================================================
CASE 059 | Iroro Wisdom Ovie | January ?, 2020 | Nigeria
================================================================================================
DATABASE RECORD
id 59
date January ?, 2020
original_date January ?, 2020
year 2020
month 1
quarter 2020-Q1
victim Iroro Wisdom Ovie
location Abraka, Nigeria
country Nigeria
scenario Home Invasion
description Father of 2 shot & killed by home invaders seeking $10,000 in bitcoin. Victim only had $400 in his wallet.
kidnappings 1
violence_torture 1
drugs_alcohol 0
weapons 1
theft 1
life_taken 1
money_wanted $10.000
coin_type BTC
reports HeraldSheets, VANGUARD
notes father of 2 shot dead for assumed 10k in btc, he only ad $400 of btc in his wallet
has_processed_date 0
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Iroro Wisdom Ovie
**Attackers:** Unknown number of perpetrators
**Attack Method:** Home Invasion - victim kidnapped
**Violence Used:** Murder/homicide
**Crypto Stolen:** $10.000 in BTC
**Status:** Victim deceased; investigation ongoing
LINKED SOURCES
[url] https://www.vanguardngr.com/2020/02/4-arrested-over-killing-of-delta-pdp-member/
NOTES ON THIS FILE
* matched to sheet row 60: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source HeraldSheets, VANGUARD
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 60, column "Article 2"
Length 1,910 chars
------------------------------------------------------------------------------------------------
4 arrested over killing of Delta PDP member
Four persons have been arrested in connection with the killing of a member of the Peoples Democratic Party, PDP in Abraka, Ethiope East local government area of Delta State.
The victim, Iroro Wisdom Ovie, a father of two, was beaten and shot by unknown gunmen last month at his Lucas area residence along the Police Station axis of Abraka.
Confirming the arrest of the suspects yesterday, a security source at the Abraka police station disclosed that eight members of the Vikings confraternity were fingered in the incident, adding that four of the suspects including a bosom friend of the victim have been arrested and are currently in police custody.
He said: “Two of the suspects are members of the anti-cult group while the other arrested suspect is the leader of the Vikings confraternity in the area.
“Investigations so far have also revealed that the bosom friend of the victim arrested had hinted one of the suspects of the discovery of $10, 000 in the victim’s Bitcoin wallet and then contacted the other suspects for the robbery operation.
“From the confessional statements of the suspects, their intentions for carrying out the operation was to dispossess Iroro of the $10, 000 in his Bitcoin wallet but were disappointed to find out that what was left when they struck was $400.
“According to them, they were forced to shoot him twice as he made an attempt to identify them while they were trying to open his account through his phone.
“They eventually left with the phone and days later planned to sell the phone to a buyer, who rather than purchasing it decided to contact security operatives. With the help of the anti-cult group, the police were able to arrest four of the suspects.”
Contacted, the Delta State Police Public Relations Officer, Onome Onovwakpoyeya, promised to get details of the incident, but she was yet to as at press time.
------------------------------------------------------------------------------------------------
ARTICLE 2
Source HeraldSheets, VANGUARD
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 60, column "Article 3"
Length 2,461 chars
------------------------------------------------------------------------------------------------
Nigerian Man Shot Dead After Resisting Armed Robbers’ Access to Bitcoin Wallet on His Phone
According to Punchng, four persons have been arrested in connection with the death of a People’s Democratic Party (PDP) member in Abraka, Delta State Nigeria who was beaten and shot dead after resisting armed robbers that were attempting to access the Bitcoin wallet on his phone.
The victim, Iroro Wisdom Ovie, a father of two, was beaten and shot dead by unknown gunmen last month at his residence in Lucas area, along the Police Station axis of Abraka.
A security source at the Abraka police station confirmed the arrest of the suspects on 25th February 2020. The source disclosed that eight members of the Vikings confraternity were named in the incident.
According to the report, four of the suspects including a close friend of the victim have been apprehended and presently in police custody.
The source said: “Two of the suspects are members of the anti-cult group while the other arrested suspect is the leader of the Vikings confraternity in the area.
“Investigations so far have also revealed that the bosom friend of the victim arrested had hinted one of the suspects of the discovery of $10,000 in the victim’s Bitcoin wallet and then contacted the other suspects for the robbery operation.
“From the confessional statements of the suspects, their intentions for carrying out the operation was to dispossess Iroro of the $10,000 in his Bitcoin wallet but were disappointed to find out that what was left when they struck was $400.
“According to them, they were forced to shoot him twice as he made an attempt to identify them while they were trying to open his account through his phone.
“They eventually left with the phone and days later planned to sell the phone to a buyer, who rather than purchasing it decided to contact security operatives. With the help of the anti-cult group, the police were able to arrest four of the suspects.”
Important Safety Precautions as a Bitcoin or Cryptocurrency Holder
To avoid such occurrence as a Bitcoin or cryptocurrency holder, keep your wallets away from your phone or computer where bad guys can easily find it.
Avoid any action that could reveal that you own Bitcoin to avoid becoming the target of the bad guys. If possible, don’t reveal to your family and friends that you own Bitcoin or any valuable cryptocurrency-related assets.
Above all, you can help yourself to stay safe if you trust nobody.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 059
================================================================================================
merge-output/sources/060_17-y-o-trader.txt
+92
View File
@@ -0,0 +1,92 @@
================================================================================================
CASE 060 | 17 y/o trader | January ?, 2020 | UK
================================================================================================
DATABASE RECORD
id 60
date January ?, 2020
original_date January ?, 2020
year 2020
month 1
quarter 2020-Q1
victim 17 y/o trader
location Preston, Lancashire, England
country UK
scenario Malicious Invitation - SocialEng
description Trader lured to apartment, kidnapped, driven around in car trunk.
kidnappings 1
violence_torture 1
drugs_alcohol 0
weapons 1
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports LancsLive
notes teen trader needed higher exchange limits, lured into hotel, kidnapped, extorted
has_processed_date 0
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** 17 y/o trader
**Attackers:** Known associate(s) who betrayed victim
**Attack Method:** Malicious Invitation - SocialEng - victim kidnapped
**Violence Used:** Physical violence
**Crypto Stolen:** Amount not disclosed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.lancs.live/news/lancashire-news/kidnapped-teen-crypto-trader-hid-25569752
NOTES ON THIS FILE
* matched to sheet row 61: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source LancsLive
URL https://www.lancs.live/news/lancashire-news/kidnapped-teen-crypto-trader-hid-25569752
Origin reported_K&R sheet, row 61, column "Articles"
Length 7,104 chars
Trimmed site furniture removed on review; kept text is verbatim. Full original (7,140 chars) archived, sha256 1681ae4d7b10aec56131d13bf9e94085260a5515d0c0dc7f80e1070bafabddfb
------------------------------------------------------------------------------------------------
Kidnapped teen crypto trader hid hairs from car boot to help police if he was murdered
The 17-year-old was lured to a Preston hotel before being bundled into the car boot
The teenager was asked to meet at an apartment in Winckley Square
A teenage crypto trader was lured to a Preston apartment and kidnapped by a gang, who tried to tried to rob him of £20,000.
The 17-year-old entrepreneur was tied down in a hotel bathroom, with a pillow over his head, and threatened with a machete, before being bundled into a car boot and driven round. The boy was so scared he hid hairs he found in the car boot in his pocket, to provide forensic evidence for a murder investigation if he was killed.
He was eventually dumped in Chorley and ran to a stranger’s house for help, Preston Crown Court heard.
In January 2020, the successful 17-year-old, who can not be named for legal reasons, had reached his £10,000 cryptocurrency withdrawal limit and needed help accessing more funds to continue his enterprise, Preston Crown Court heard. News of the teenager's success was 'common knowledge' and Tasmina Rhaman, 21, contacted him, offering to help.
Using a fake Snapchat profile, Rhaman arranged to meet the teenager at the Travelodge in New Hall Lane but when Rhaman was delayed they rearranged the meeting for the Winckley Square apartments on Sunday January 16. Clare Thomas, prosecuting, said the teenager hoped to meet in a public place, but Rahman insisted on meeting indoors.
"That is because there was a plan to kidnap him", she told the court.
On January 16, the trader and a friend went to the apartment, which had been paid for by Rahman. However when they arrived she told them she needed a phone charger and the boys agreed to fetch one from home.
While they were away, Rahman's 16-year-old cousin, and Takudzwa Murombedzi, 20, went to the hotel room and lay in wait. The 16-year-old had a machete and had his hood up, while Murombedzi wore a balaclava. "They had an arrangement to act together to get money from him", Ms Thomas said.
When the teenager returned he was "outnumbered and taken by surprise." Murombedzi and the 16-year-old forced the teenager into the hotel bathroom, where bin bags had been taped to the walls to create the impression there would be blood shed.
"His hands were restrained, his mobile phone taken from him, a pillow placed over his head and bin bags stuffed in his mouth", Ms Thomas said. "They said they knew he had £20,000 and said he would be killed if he didn't give it to them. He was forced to open his mobile phone and they said they would hurt his mum and his younger brother if he did not give it to them.
"Ms Rahman was smiling as he was being tied up and threatened with the machete. The victim said he did not have £20,000 and was forced to sit on the toilet until they got a chair. They said they would share on social media to humiliate him."
Ms Thomas said the plan seemed to be Rahman's idea to get the victim's home address and pay his family a visit. The 16-year-old made a bizarre claim that he too was a victim of the gang, but said he would help the teenager by taking the money from him and handing it over to the girl.
"He (the victim) formed the impression the 16-year-old was the mastermind", Ms Thomas said.
Rahman went to the teenager's home, along with Albert Kahiya, 19, who was the gang's designated driver. Kahiya told the victim's mum her son was with friends and he was there to collect some things. "She was shocked and scared that her son was missing, and she had a young child in the house", Ms Thomas said.
"He (the victim) was put on the phone and told to drop £20,000 out of the window. He hoped his mum would realise he was in danger and phone the police."
Back at the hotel the teenager was untied and the bin bags were removed from his mouth and hands. He was ordered into the boot of a waiting Peugeot, where he feared he would be killed. With Kahiya in the driver's seat, and Murombedzi in the passenger seat, the terrified teenager attempted to gather forensic evidence for what he feared could be a future murder investigation. He was eventually let out in Chorley, where he ran to a random house in distress.
In a victim statement, the teenager says he feels uneasy and paranoid since the kidnap. He feels threatened and victimised when he leaves the house and finds it hard to get up for college.
Before this happened he was very sociable and enjoyed going out with his family, but now he is constantly watching his back. When he leaves the house he worries he is being followed, he said.
His parents have also been affected and constantly check the home security. He suffers flashbacks and panic attacks and is on a waiting list for counselling. In a letter to the court, the 16-year-old defendant said he was sorry for what he had done, and hoped the victim and his family got peace of mind from the outcome of the hearing. He said he hoped to train as a youth worker to help other young people.
Beverley Hackett, defending Kahiya said he did not know the true extent of what he was getting involved in when he agreed to go to Preston. Ms Hackett said her client was an otherwise unremarkable young person, with no criminal record, wo lives with his parents and works in a warehouse.
Speaking on behalf of Murombedzi, Daniel Harman said: “He is an impressive young man who made a catastrophic, life changing mistake.” He added his client had acted with an extreme level of naivety.
Murombedzi, of Harebell Road, Didcock, Oxfordshire, and the 16-year-old defendant pleaded guilty to robbery and conspiracy to kidnap. Rahman, of Holland Road, Sheffield, and Kahiya, of Willow Way, Coventry, pleaded guilty to conspiracy to kidnap.
Sentencing, Judge Darren Preston said: “Your victim appears to have done well for himself trading in cryptocurrency, despite being only 17 years old. Together you hatched a plot, whereby Rahman lured him into your collective web using a fake Snapchat name because it seems he was unable, due to his age, to get sufficiient credit to trade as he wanted to.
“There was a plot to set him up. He feared for his life. This was a terrifying experience for anyone, let alone a 17-year-old. The whole enterprise was planned. It was designed to cause maximum fear and distress
“The effects on him have been long lasting with serious psychological and social consequences. Each of you got involved in this serious criminality, and given that you are all from decent families, and two or three of you have been in employment and contributing to society. All of you are polite, decent, family oriented individuals. Why you got involved in this is difficult to fathom as this is serious criminality. If you were adults you would be getting sentences measured in double figures.”
He sentenced Murombedzi and the 16-year-old defendant to six years each for the robbery and five years for the kidnap to run concurrently, to be served in a young offenders institute. Kahiya, who played a lesser role, was sentenced to four years. Rahman was not represented at the hearing and will be sentenced on January 16.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 060
================================================================================================
merge-output/sources/061_Mark-Cheng-Jin-Quan.txt
+90
View File
@@ -0,0 +1,90 @@
================================================================================================
CASE 061 | Mark Cheng Jin Quan | January 8, 2020 | Thailand
================================================================================================
DATABASE RECORD
id 61
date January 8, 2020
original_date January 8, 2020
year 2020
month 1
quarter 2020-Q1
victim Mark Cheng Jin Quan
location Bangkok, Thailand
country Thailand
scenario Kidnapping
description Blockchain advisor kidnapped, held at gunpoint, extorted for $60,000 in bitcoin
kidnappings 1
violence_torture 1
drugs_alcohol 1
weapons 1
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports Asia1
notes his friend convinced him to go to thailand and he set him up
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Mark Cheng Jin Quan
**Attackers:** Unknown number of perpetrators
**Attack Method:** Kidnapping for ransom
**Violence Used:** Physical violence, firearms, drugging
**Crypto Stolen:** Approximately $60,000
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.asiaone.com/singapore/man-out-bail-cheating-charges-allegedly-kidnapped-thailand
NOTES ON THIS FILE
* matched to sheet row 62: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Asia1
URL https://www.asiaone.com/singapore/man-out-bail-cheating-charges-allegedly-kidnapped-thailand
Origin reported_K&R sheet, row 62, column "Articles"
Length 3,899 chars
------------------------------------------------------------------------------------------------
Singaporean out on bail allegedly kidnapped and tortured in Thailand
He was on a business trip while out on bail after being charged with cheating here last year
A Singaporean businessman facing cheating charges here was allegedly kidnapped and tortured in Thailand last week.
Despite paying his captors more than $60,000 in Bitcoin for his freedom, Mark Cheng Jin Quan, 32, claimed they were still going to execute him at gunpoint until he managed to escape.
The blockchain adviser with Singapore fintech company X Infinity said he reported the kidnapping to Thai police last Friday, hours after his escape.
He was worried about his Singaporean acquaintance, Kim Lee Yao Wei, 31, who had also been kidnapped after accompanying him on the business trip to Thailand.
But in a dramatic twist yesterday, the Royal Thai Police told a press conference that Lee was the alleged mastermind of the kidnapping and had been arrested and charged with robbery, illegal detention, physical assault and illegal possession of firearms.
FOUR CHARGES
Cheng was slapped with one charge under the Securities and Futures Act and three charges for criminal breach of trust in the State Courts here last year.
He is alleged to have dishonestly misappropriated more than $300,000 belonging to an investments company in 2014.
Cheng was given bail of $120,000 for permission to go to Thailand and Malaysia for work-related matters last Wednesday.
He reportedly arrived at Suvarnabhumi Airport in Bangkok with Lee, whom he knew through Bitcoin dealings, on Thursday morning.
Cheng claimed Lee had persuaded him to go to Thailand and negotiate a business deal with some locals.
They took a private taxi at the airport and later stopped at a petrol kiosk along the way at Lee's suggestion, Cheng told Chinese evening daily Lianhe Wanbao.
At the kiosk, a group of masked men allegedly grabbed and bundled them into a nearby car. They were then blindfolded, beaten and drugged.
Over the next 12 hours, he was taken to four different locations in forested areas where he was tortured, Cheng told Wanbao.
"They took off my clothes, splashed ice water on me and gave me electric shocks. They demanded that I hand over US$1 million (S$1.3m) in Bitcoin," he said.
But he told them he could give them only 1.4 million baht (S$62,400) in Bitcoin. After he paid them, they took him to a hut in a padi field where they pointed a gun at his head.
He had earlier heard men digging what he believed to be a grave, he told Wanbao.
"One of them held the gun against the back of my head while the others stepped away.
"Fortunately, I know martial arts. I reached behind my head and grabbed the pistol, and then I fled," he said.
Royal Thai Police spokesman Colonel Krisana Pattanacharoen said a good Samaritan picked up Cheng at the side of the road and took him to Ongkharak Police Station, some 60km from Bangkok, where he made a report at about 7.30am last Friday, Thai news outlet Siam Rath reported.
Colonel Krisana added that Lee was arrested on Sunday in a Bangkok hotel after a manhunt.
Mr Chano Pemberger, a 24-year-old Thai actor, who allegedly owns the car used in the kidnapping, is currently a person of interest in the case, Thai news outlet Sanook reported.
Cheng is still shocked by the revelation that Lee had allegedly masterminded the kidnapping, Wanbao reported.
"I didn't expect my friend to be involved. I really don't know who I can trust now," he said.
Cheng, who claims he is currently under police protection in a safe house in Thailand, is expected to testify in Lee's trial at a later date.
Cheng, who co-founded Avelife, a non-governmental organisation that focuses on social enterprise and the environment, is the first Singaporean to win the Queen's Young Leaders Award in 2016 for his involvement in environmental initiatives.
It is not known if he will return to Singapore for his next court hearing on Feb 3.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 061
================================================================================================
merge-output/sources/062_Mayfair-Quick-Mart.txt
+62
View File
@@ -0,0 +1,62 @@
================================================================================================
CASE 062 | Mayfair Quick Mart | January 21, 2020 | USA
================================================================================================
DATABASE RECORD
id 62
date January 21, 2020
original_date January 21, 2020
year 2020
month 1
quarter 2020-Q1
victim Mayfair Quick Mart
location Philadelphia, Pennsylvania
country USA
scenario Armed Robbery in Public Space
description 2 men break into BTM, steal cash box
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 0
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports CBS News
notes two black kids break into bATM také cash box
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Mayfair Quick Mart
**Attackers:** Unknown number of perpetrators
**Attack Method:** Armed Robbery in Public Space
**Violence Used:** Threats/intimidation
**Crypto Stolen:** Amount not disclosed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.cbsnews.com/philadelphia/news/philadelphia-police-searching-for-2-suspects-who-broke-into-bitcoin-machine-stole-cash-box/
NOTES ON THIS FILE
* matched to sheet row 63: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source NETimes, YT
URL None
Origin reported_K&R sheet, row 63, column "Articles"
Length 306 chars
------------------------------------------------------------------------------------------------
Authorities are looking for two men who stole cash from a Bitcoin machine inside a Mayfair store.
The brazen theft occurred at 5:50 a.m. Jan. 21 inside a shop located at 7250 Frankford Ave., police said. Surveillance footage shows the men using crowbars to pry open the machine before taking the cash box.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 062
================================================================================================
merge-output/sources/063_Unidentified-couple.txt
+80
View File
@@ -0,0 +1,80 @@
================================================================================================
CASE 063 | Unidentified couple | February 10, 2020 | UK
================================================================================================
DATABASE RECORD
id 63
date February 10, 2020
original_date February 10, 2020
year 2020
month 2
quarter 2020-Q1
victim Unidentified couple
location Carlisle, England
country UK
scenario Home Invasion
description Home invaders force victims to create crypto exchange accounts
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 1
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports BBC
notes forced to open crypto exchange accounts with fake pistol, transfer cash, buy crypto
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Unidentified couple
**Attackers:** Unknown number of perpetrators
**Attack Method:** Home Invasion
**Violence Used:** Threats/intimidation
**Crypto Stolen:** Amount not disclosed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.bbc.com/news/uk-england-cumbria-62879543
NOTES ON THIS FILE
* matched to sheet row 64: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source BBC
URL https://www.bbc.com/news/uk-england-cumbria-62879543
Origin reported_K&R sheet, row 64, column "Articles"
Length 2,977 chars
------------------------------------------------------------------------------------------------
Men jailed for armed robbery using cryptocurrency exchange
Two armed robbers who forced their victims to open cryptocurrency accounts at gunpoint in a bid to covertly steal money have been jailed.
Jordan Barrett, 23, and Ted Richards, 24, used a crypto-exchange website to try and hide their tracks and cheat justice.
They targeted the house in Moorhouse Road, Carlisle, in February 2020.
At Carlisle Crown Court, both men admitted two counts of robbery and two counts of false imprisonment.
Barrett and Richards targeted the property because Barrett believed a third man living there had been the driver in a collision which seriously injured his girlfriend, the court heard.
Armed with a starter pistol and a knife, the masked duo "took the victims' phones, forced them to unlock them and then log into their online bank accounts in order to move money between the accounts," prosecutor Hannah Forsyth said.
After cash was transferred, Barrett and Richards then tried to deposit £3,500 from one account to a cryptocurrency exchange website.
Cumbria ConstabularyThe victims believed the gun, a starter pistol bought on the internet, was a deadly firearm
They forced their victims to hold up ID while photos were taken and attempts were made to open bogus accounts in their names.
"While the male with the knife took the pictures and forced the victims to move money between accounts, the man with the pistol stood over the others and pointed the gun - which had a torch and laser on it - at them," Ms Forsyth said.
"Terrifying ordeal"
When a friend arrived at the property, one victim was urged to make him leave and warned: "Don't do anything stupid and you won't get hurt", the court was told.
Barrett and Richards stole a games console and iPhone before Barrett fired the imitation firearm outside the property "as a warning".
Police were alerted before the fake cryptocurrency accounts could be authenticated. Detectives and financial investigators carried out an inquiry and found the gun at Barrett's address. DNA found on the magazine and trigger belonged to Richards.
Judge Nicholas Barker jailed Barrett, of Red Bank Square, Carlisle, for six years nine months and Richards, of Empire Square, Southwark, London, for six years.
The judge said their victims were subjected to a "terrifying ordeal" as they believed the gun was genuine.
One victim said he had since suffered from depression and anxiety, while the other man suffered nightmares and anxiety, and felt vulnerable in his own home.
Following sentencing, Det Supt Jenny Beattie, of Cumbria Police, said: "The determination shown by the investigation team has been unwavering in carrying out the inquires which has led to a successful conviction.
"The team's efforts are particularly impressive given the circumstances of how the criminals forced the victims to create cryptocurrency accounts, so they could attempt to evade identification, is believed to be a first to be put before a court in this country."
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 063
================================================================================================
merge-output/sources/064_Unidentified-siblings.txt
+104
View File
@@ -0,0 +1,104 @@
================================================================================================
CASE 064 | Unidentified siblings | March 18, 2020 | UK
================================================================================================
DATABASE RECORD
id 64
date March 18, 2020
original_date March 18, 2020
year 2020
month 3
quarter 2020-Q1
victim Unidentified siblings
location Blantyre, Scotland
country UK
scenario Home Invasion
description Home invader beats woman with Toblerone, forces victim to transfer $200,000 of BTC
kidnappings 0
violence_torture 1
drugs_alcohol 0
weapons 1
theft 1
life_taken 0
money_wanted (null)
coin_type (null)
reports BBC
notes Invaded couple’s home, machete armed men, struck woman with toblerone chocolate till she bled,
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Unidentified siblings
**Attackers:** Unknown number of perpetrators
**Attack Method:** Home Invasion
**Violence Used:** Physical assault
**Crypto Stolen:** Approximately $200,000
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.bbc.com/news/articles/cw5w5zyg979o
NOTES ON THIS FILE
* matched to sheet row 65: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source BBC
URL https://www.bbc.com/news/articles/cw5w5zyg979o
Origin reported_K&R sheet, row 65, column "Articles"
Length 1,786 chars
------------------------------------------------------------------------------------------------
Courts seize £110,000 of crypto cash in Scots legal first
A man involved in a violent robbery to steal cryptocurrency has had £110,000 seized by the Crown in a Scots legal first.
Prosecutors have used proceeds of crime legislation to convert and seize Bitcoin from John Ross Rennie as physical cash.
Rennie, 29, was convicted of possessing of stolen goods after a man was forced to transfer Bitcoin during an assault at a home in Blantyre, Lanarkshire, in March 2020.
He was given a community sentence for being the “technical brains” behind the raid by three men, but had denied taking part in the robbery itself.
Prosecution lawyers took Rennie, of Cambuslang, to court using proceeds of crime legislation earlier this year.
Judge Lady Ross wanted legal authority about how it could be settled with cryptocurrency.
At the High Court in Edinburgh, lawyers agreed that the 23.5 Bitcoin could be converted into physical cash and that the sum should be £109,601.
'Pivotal role'
Delivery driver Rennie had been given 150 hours of unpaid work and a six month supervision order in November last year.
His trial at the High Court in Glasgow heard that the victim was forced to transfer cryptocurrency after waking up to find a man standing over him with a machete.
A woman in the home was also repeatedly struck with a Toblerone bar and thrown into a bedroom.
One of the three men involved in the attack made a “throat-slitting gesture” with the bloodied chocolate bar before they fled the scene.
Rennie was said to have a “pivotal role” in providing technical expertise to the men on how to transfer the Bitcoin.
Police Scotland said it was the first robbery in Scotland to involve tracing stolen cryptocurrency.
Rennie's lawyer Marco Guarino said: "It has been an unusual case throughout".
------------------------------------------------------------------------------------------------
ARTICLE 2
Source BBC
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 65, column "Article 2"
Length 2,445 chars
------------------------------------------------------------------------------------------------
Man convicted after cryptocurrency robbery
A 28-year-old man from Lanarkshire has been convicted after having up to £1.2m worth of cryptocurrency in his account following a violent robbery.
John Ross D'Alfonso was described as the "technical" brains behind the crime - thought to be the first robbery in Scotland involving stolen cryptocurrency.
He had denied being part of the raid itself but was found guilty of reset, meaning he knowingly had something that was stolen and intended to keep it.
The High Court in Glasgow heard that three men went into a home in Blantyre in Lanarkshire and forced the homeowner to transfer his Bitcoin, a form of digital cash, to D'Alfonso's account.
The court was told that one of the men in the house was armed with a machete, and another repeatedly struck a woman on the head with a personalised Toblerone bar until it was covered in blood.
The three men then escaped in an expensive Audi car belonging to the homeowner after the cash was transferred.
The court heard that because of the unstable nature of the value of Bitcoin, it could have been worth anywhere between £100,000 and £1.2m when stolen on 18 March 2020.
Bitcoin to blockchain: What key crypto words mean
NatWest limits crypto transfers over scam fears
Drugs gang jailed for £5m cryptocurrency operationD'Alfonso, who was a delivery driver from Cambuslang, had been described as the technical mind behind the robbery and denied being involved on the day.
He insisted a "scary" relative had forced him to put the money into his account.
Jurors were told there was "no dispute" the digital cash had been stolen and that it ended up in D'Alfonso's account and was transferred elsewhere.
Prosecutors said D'Alfonso had not been at the robbery that night and instead gave "technical expertise" to help steal the money.
D'Alfonso was cleared of robbery and assault charges and will be sentenced later this month in Edinburgh.
Det Insp Craig Potter, of Police Scotland’s Cyber Investigations unit called the case a complex investigation.
"This is a complex and constantly evolving technology," he said.
"Specialist cybercrime officers were able to follow the movement of funds to show he had been responsible for the bitcoin wallet which received the stolen funds.
"This conviction demonstrates Police Scotland capability and commitment to tackling criminality involving the digital space and bringing criminals operating in this world to justice."
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 064
================================================================================================
merge-output/sources/066_Exxon-Gas-Station.txt
+55
View File
@@ -0,0 +1,55 @@
================================================================================================
CASE 066 | Exxon Gas Station | May 19, 2020 | USA
================================================================================================
DATABASE RECORD
id 66
date May 19, 2020
original_date mayo 19, 2020
year 2020
month 5
quarter 2020-Q2
victim Exxon Gas Station
location East Lansdowne, Pennsylvania
country USA
scenario Armed Robbery in Public Space
description 2 subjects pry open BTM in broad daylight
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 0
theft 1
life_taken 0
money_wanted Undisclosed
coin_type Bitcoin ATM'S Cash
reports FB
notes they got in and out in seconds
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Exxon Gas Station
**Attackers:** Unknown number of perpetrators
**Attack Method:** Armed Robbery in Public Space
**Violence Used:** Threats/intimidation
**Crypto Stolen:** Undisclosed in Bitcoin ATM'S Cash
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.facebook.com/watch/?v=277210370075309
NOTES ON THIS FILE
* matched to sheet row 67: exact match on victim + year, unique on both sides
OTHER LINKED SOURCES
[NOT AN ARTICLE] url None — video or social post; recorded as a source reference, not transcribed
https://www.facebook.com/watch/?v=277210370075309
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 066
================================================================================================
merge-output/sources/067_Ellis-Pinsky.txt
+69
View File
@@ -0,0 +1,69 @@
================================================================================================
CASE 067 | Ellis Pinsky | May 23, 2020 | USA
================================================================================================
DATABASE RECORD
id 67
date May 23, 2020
original_date May 23, 2020
year 2020
month 5
quarter 2020-Q2
victim Ellis Pinsky
location Irvinton, NY
country USA
scenario Dodged Attack
description 2 men commit home invasion of hacker, seeking tens of millions of dollars in bitcoin
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 0
theft 0
life_taken 0
money_wanted (null)
coin_type (null)
reports DailyVoice
notes FBI uncovered plans to kidnap for millions$ in BTC
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Ellis Pinsky
**Attackers:** Unknown number of perpetrators
**Attack Method:** Dodged Attack
**Violence Used:** Threats/intimidation
**Crypto Stolen:** No theft completed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://dailyvoice.com/new-york/rivertowns/news/duo-planned-westchester-home-invasion-robbery-for-tens-of-millions-in-bitcoin-feds-say/836137/
NOTES ON THIS FILE
* matched to sheet row 68: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source DailyVoice
URL https://dailyvoice.com/new-york/rivertowns/news/duo-planned-westchester-home-invasion-robbery-for-tens-of-millions-in-bitcoin-feds-say/836137/
Origin reported_K&R sheet, row 68, column "Articles"
Length 1,370 chars
------------------------------------------------------------------------------------------------
Duo Planned Irvington Home Invasion Robbery For Tens Of Millions In Bitcoin, Feds Say
Two men have been apprehended after federal authorities say they planned to commit a home invasion robbery for tens of millions of dollars in bitcoin in Westchester.
Bitcoin coins
Federal officials announced the unsealing of an Indictment in White Plains Federal Court on Friday, June 24m charging the duo with conspiracy to commit Hobbs Act robbery in May 2020 in Irvington-on-Hudson. 
Go to article
Dominic Pineda, age 21, of Manassas, Virginia, and Shon Morgan, also age 21, of Centreville, Virginia, were arrested on Thursday, June 23 in Virginia.
From May 18, 20200 to May 24, 2020, they participated in the plan to break into the Irvington and rob its residents of cash and cryptocurrency, US Attorney for the Southern District in New York Damian Williams said.
“As alleged in the indictment, the defendants participated in a violent plan to break into a family’s home in the middle of the night and force its residents to provide the code to what the defendants believed was tens of millions of dollars in Bitcoin currency," Williams said. "Thanks to the work of the FBI, the defendants will now be held responsible for the alleged acts.”
Pineda and Morgan have each been charged with conspiracy to commit Hobbs Act robbery, which carries a maximum term of 20 years in prison.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 067
================================================================================================
merge-output/sources/068_Robert-Ross.txt
+109
View File
@@ -0,0 +1,109 @@
================================================================================================
CASE 068 | Robert Ross | June ?, 2020 | UK
================================================================================================
DATABASE RECORD
id 68
date June ?, 2020
original_date nan
year 2020
month 6
quarter 2020-Q2
victim Robert Ross
location (null)
country UK
scenario P2P Trade Gone Wrong
description Robert Ross, a Bitcoin trader from the United Kingdom, was robbed of approximately $800,000 in Bitcoin
kidnappings 1
violence_torture 0
drugs_alcohol 0
weapons 0
theft 0
life_taken 0
money_wanted $800,000
coin_type BTC
reports CryptoRo
notes gunpoint robbery
has_processed_date 0
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Robert Ross
**Attackers:** Unknown number of perpetrators
**Attack Method:** P2P Trade Gone Wrong - victim kidnapped
**Violence Used:** Threats/intimidation
**Crypto Stolen:** $800,000 in BTC
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://crypto.ro/en/news/crypto-theft-investment-blogger-robbed-of-bitcoin-holdings-in-bali/
NOTES ON THIS FILE
* matched to sheet row 69: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
FETCHED ARTICLE 1 [RAW EXTRACT — NOT YET TRIMMED]
!! This is the whole page as extracted. It still contains site furniture,
!! and may contain teaser headlines for UNRELATED cases. Trim on read-through.
!! Do not quote from it without checking the passage belongs to this case.
Source crypto.ro
URL https://crypto.ro/en/news/crypto-theft-investment-blogger-robbed-of-bitcoin-holdings-in-bali/
Field url
Retrieved 2026-08-06T13:47:22+00:00 via raw HTTP retrieval, deterministic extraction (HTTP 200)
Language unknown
Kept paragraphs ALL 19 paragraphs, untrimmed
Length 4,680 chars
Integrity sha256 a45752dd033c7eb6df16c4c33bc9d7fec8d453bfdfd5f6ebb4d9a540c519fa32
Trimmed NOT TRIMMED. Full page extract; trim on read-through.
Caveat retrieved from a live page on the date above. Unlike text copied
from the spreadsheet, there is no second copy to hash it against.
------------------------------------------------------------------------------------------------
ORIGINAL (unknown, verbatim as retrieved)
Crypto theft: Investment blogger robbed of Bitcoin holdings in Bali
A popular investment blogger and cryptocurrency enthusiast, Yuri Boytsov, was attacked and robbed at his villa in Bali, according to reports. Four assailants, including an Indonesian man in a police uniform and two men of Caucasian appearance, reportedly stormed into Boytsov's villa and demanded access to his cryptocurrency wallets.
The attackers claimed that Boytsov had "ripped someone off" and demanded he transfers $284,000 in Bitcoin to their accounts. The attackers beat Boytsov and forced him to transfer the funds, which required verification with a picture of Boytsov's passport.
Local police have reportedly apprehended one suspect in the case, although he denies involvement and accuses Boytsov of being a fraudster. The incident highlights the growing risk of theft and fraud in the cryptocurrency space, particularly for high-profile investors and traders.
The Bali incident follows a series of recent cryptocurrency-related robberies in Russia, including the theft of video cards from a mining farm near Moscow and the robbery of a crypto trader selling stablecoins in the city. These incidents remind investors and traders to take appropriate security measures to protect their digital assets.
Cryptocurrency remains a lucrative target for criminals due to its decentralized nature and lack of regulation, making it difficult for authorities to track and recover stolen funds. As the value of Bitcoin and other cryptocurrencies continues to rise, investors and traders must remain vigilant and take steps to secure their holdings.
Crypto Theft: Three Examples of Individuals Who Lost Their Digital Assets to Criminals
Pavel Lerner (2017): In December 2017, Pavel Lerner, the CEO of the cryptocurrency exchange Exmo, was kidnapped in Kiev, Ukraine. The kidnappers demanded a ransom of $1 million in Bitcoin in exchange for Lerner's release. It is unclear whether the ransom was paid, but Lerner was eventually released unharmed.
Louis Meza (2018): In November 2018, Louis Meza, a New York resident, was arrested and charged with kidnapping and stealing $1.8 million in Ether from a friend. Meza allegedly lured his friend to a hotel room, where he and several accomplices tied the friend up and forced him to reveal his Ethereum wallet password. The group then transferred the funds out of the wallet and into their own accounts.
Robert Ross (2020): In June 2020, Robert Ross, a Bitcoin trader from the United Kingdom, was robbed of approximately $800,000 in Bitcoin at gunpoint. Ross had arranged to meet a buyer to sell the Bitcoin, but when he arrived at the agreed-upon location, he was held at gunpoint and forced to transfer the funds to the attacker's wallet. The attacker was later arrested and sentenced to ten years in prison.
How to prevent crypto theft?
Preventing crypto theft requires a combination of strong security measures and vigilance on the part of investors and traders. Here are some steps that can be taken to minimize the risk of crypto theft:
Use a secure wallet: A secure hardware wallet is one of the best ways to protect your digital assets. Hardware wallets store your private keys offline, making them much more difficult for hackers to access. Make sure to choose a wallet from a reputable manufacturer and keep it in a secure location.
Use two-factor authentication: Two-factor authentication (2FA) adds an extra layer of security to your accounts by requiring a second form of verification in addition to your password. This can include a fingerprint, a code sent to your phone, or a physical security key.
Be cautious with public Wi-Fi: Public Wi-Fi networks can be a security risk, as they may be monitored by hackers. Avoid using public Wi-Fi networks when accessing your cryptocurrency accounts or wallets.
Keep your software up to date: Keep your computer and mobile devices updated with the latest security patches and software updates. Outdated software can have vulnerabilities that hackers can exploit.
Be wary of phishing scams: Phishing scams are a common way for hackers to steal login credentials and other sensitive information. Be cautious of emails or messages that ask for your login information or direct you to a fake website.
Diversify your holdings: Consider diversifying your cryptocurrency holdings across multiple wallets and exchanges. This can help minimize the impact of a potential hack or theft.
By taking these steps, investors and traders can help protect their digital assets from theft and fraud. It is important to remain vigilant and stay up to date on the latest security threats in the cryptocurrency space.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 068
================================================================================================
merge-output/sources/069_Male-Freshman.txt
+92
View File
@@ -0,0 +1,92 @@
================================================================================================
CASE 069 | Male Freshman | September, 2020 | UK
================================================================================================
DATABASE RECORD
id 69
date September, 2020
original_date September, 2020
year 2020
month 9
quarter 2020-Q3
victim Male Freshman
location Kent, England
country UK
scenario Malicious Invitation - SocialEng
description Student robbed of bitcoin at knifepoint during first week at university.
kidnappings 1
violence_torture 0
drugs_alcohol 0
weapons 1
theft 1
life_taken 0
money_wanted £68,000
coin_type BTC
reports TheSun
notes false friend sets up a trap to extort btc at knifepoint
has_processed_date 0
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Male Freshman
**Attackers:** Known associate(s) who betrayed victim
**Attack Method:** Malicious Invitation - SocialEng - victim kidnapped
**Violence Used:** Knife
**Crypto Stolen:** £68,000 in BTC
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.the-sun.com/news/3729816/student-forced-bitcoin-knifepoint-cops/
NOTES ON THIS FILE
* matched to sheet row 70: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source TheSun
URL https://www.the-sun.com/news/3729816/student-forced-bitcoin-knifepoint-cops/
Origin reported_K&R sheet, row 70, column "Articles"
Length 3,661 chars
Trimmed site furniture removed on review; kept text is verbatim. Full original (3,942 chars) archived, sha256 1cf40a52941b03fcf58efd5d303b8234efc4564ac6659a745af506fd59372b26
------------------------------------------------------------------------------------------------
Student forced to transfer bitcoin now worth £68k after being held at knifepoint stunned after cops drop probe
A FRESHER was robbed at knifepoint for Bitcoin now worth a whopping £68,000 during his first week at university.
The lad was forced to move back home after eight thugs stormed his accommodation in Kent and demanded the security passwords to his financial apps.
Now his horrified mum has warned others to take care after the 20-minute ordeal at Canterbury Christ Church University.
She said her son had been discussing cryptocurrency with a new friend on campus just five days after he started his course.
She said: "It was the first friend my son made from university and he was from London.
"They were just having lads' talk.
"The conversation turned to financial and the friend started talking about cyber currency."
The mother alleges the other student then invited eight school friends over from East London - and her son instantly "knew he was in trouble".No one was ever charged in connection with the incident.
The student's cryptocurrency was worth £6,000 at the time of the robbery last year - but its value has leapt over the past 12 months.
A further £3,000 of his grant money was also stolen.
After the violent mugging, the victim phoned the police before rushing over to a security hut on the university premises.
The victim's mum alleges the security guards didn't attend the scene.
She said: "He phoned the police and they didn't attend because there was something more important on that night.
"The only action the university took was moving him to different accommodation.
"He was too traumatised so he moved back home even though he had safer and better accommodation.
KNIFEPOINT RAID
"He was terrified, emasculated, humiliated and abused.
"You don't hand over nearly £10,000 if you don't think you're not going to get injured."
None of the money could be refunded and the police investigation was dropped after eight months.
The victim's mother said she was frustrated with the response from the security staff at the campus and how the police handled the case.
In a warning to other students, she said: "The police commonly call Freshers' Week 'fishing week' because all the criminals come down. They know the students have got grants, laptops, and new stuff.
"Attacks, assaults, and muggings are quite common across the country."
Canterbury District Commander Chief Inspector Mark Hedges confirmed that police were contacted about the robbery.
He said: "The incident was reported around 45 minutes after the robbery had taken place and during the call, it was established the offenders had left the scene.
"As a result, it was arranged for officers to visit the victim the following day, when further details of the robbery were disclosed, including the theft of a mobile phone and the transfer of a significant amount of cryptocurrency from the victim's account.
"A thorough investigation into the incident was carried out, including a review of local CCTV opportunities, analysis of Bitcoin 'wallet' IDs and exploration of possible forensic evidence.
"However, the case did not meet the evidential test and the three suspects were refused charge.
"Kent Police takes the safety of the county's student population extremely seriously and encourages all young people to take all steps possible to ensure they do not become victims of crime while studying away from home."
A spokesperson for CCCU said the safety of students is of "paramount importance".They added: "The reported incident was investigated and thoroughly reviewed.
"We offered the student wellbeing counselling, financial support, and relocation of accommodation."
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 069
================================================================================================
merge-output/sources/070_Unidentified.txt
+145
View File
@@ -0,0 +1,145 @@
================================================================================================
CASE 070 | Unidentified | October 1, 2020 | Ukraine
================================================================================================
DATABASE RECORD
id 70
date October 1, 2020
original_date October 1, 2020
year 2020
month 10
quarter 2020-Q4
victim Unidentified
location Kyiv, Ukraine
country Ukraine
scenario Authority Misuse
description Police kidnap a businessman, torture him, and force his wife to send them 7 bitcoin.
kidnappings 1
violence_torture 1
drugs_alcohol 0
weapons 1
theft 1
life_taken 0
money_wanted 7 BTC
coin_type BTC
reports Bastion, Forklog, FB
notes they kidnapped him from a pub, took his phone, laptop and tortured him to then call his wife for ransom
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Unidentified
**Attackers:** Individuals misusing authority
**Attack Method:** Authority Misuse - victim kidnapped
**Violence Used:** Torture
**Crypto Stolen:** 7 BTC in BTC
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://forklog.com/en/three-sbu-officers-face-charges-over-kidnapping-of-a-businessman-and-extortion-of-7-btc/
NOTES ON THIS FILE
* matched to sheet row 71: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Bastion, Forklog, FB
URL https://forklog.com/en/three-sbu-officers-face-charges-over-kidnapping-of-a-businessman-and-extortion-of-7-btc/
Origin reported_K&R sheet, row 71, column "Articles"
Length 3,578 chars
------------------------------------------------------------------------------------------------
Heads of the SBU Cyber Department kidnapped and took a businessman to the forest, tortured him, and forced him to hand over 7 Bitcoins ($80,000): they have been charged
Leaders of the Cyber Department of Ukraine's Security Service (SBU)—the deputy head of the department and the head of a division—along with an operative, have been charged with cryptocurrency theft, robbery combined with violence, kidnapping, and abuse of official powers. They are currently suspended from their positions.
According to information from Police Control Ukraine and a ruling by the Pechersk District Court of Kyiv dated August 28, 2021, the State Bureau of Investigation (DBR) established the involvement of these SBU Cyber Department employees in the illegal seizure of funds from a businessman engaged in cryptocurrency trading on exchanges.
Possessing reliable information that the entrepreneur held significant funds, the involved SBU officers actually formed a criminal group from the SBU leadership. They decided to steal the man's cryptocurrency by using force and abducted him.
On October 1, 2020, around 14:42 in Kyiv, near a PUB building on Mykhailivska Street, the serving SBU officers approached the businessman, used physical force, and forcibly pushed him into a Volkswagen T5 car.
While unlawfully holding the businessman on the car floor, the officers took the apartment keys and his iPhone. Two officers went to the apartment while others continued holding the man in the vehicle. To get the phone passwords, the officers intimidated and threatened him with violence.
Meanwhile, two SBU officers used the stolen keys to enter the apartment, stole two laptops and a tablet, and calmly returned to the car.
Afterward, the businessman was taken to a forest near Parkova Road in Kyiv and held near the car. The SBU agents tortured him by inflicting multiple injuries with blunt hard objects for one and a half hours.
One SBU officer then illegally demanded $200,000, which the businessman refused. The man was then taken to the Shevchenkivskyi Police Department in Kyiv, where he was held without formal arrest or detention documentation.
Continuing illegal detention, the officers demanded $80,000. The businessman agreed and called his wife, who transferred 7 Bitcoins (BTC) from her digital wallet to the accounts specified by the SBU officers. At the time of the transaction, this was equivalent to $80,000 USD.
Later that day, the senior officer wrote a report about detaining the man at Maidan Nezalezhnosti in Kyiv at 23:30 as a person wanted for extradition to the Russian Federation. The man was then handed over to the Shevchenkivskyi Police Department.
At the end of August, the SBU Cyber Department employees were notified of suspicion under multiple articles of the Criminal Code of Ukraine, including theft, robbery with violence, abuse of office, kidnapping, and forgery.
Specifically, the charges were brought against:
Deputy head of the 1st division of the Department for Counterintelligence Protection of State Interests in Information Security of the SBU,
Head of the Counterintelligence Protection Department for State Interests of the SBU in Sumy region,
Senior operative of the 3rd division of the 1st department of the same counterintelligence department.
During investigation, the involvement of eight SBU officers is being examined in total.
In February of this year, the DBR conducted searches at the residences of the suspects.
Currently, the relevant SBU officers have been placed under house arrest and suspended from their positions.
------------------------------------------------------------------------------------------------
ARTICLE 2
Source Bastion, Forklog, FB
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 71, column "Article 2"
Length 2,410 chars
------------------------------------------------------------------------------------------------
Three SBU officers face charges over kidnapping of a businessman and extortion of 7 BTC
The State Bureau of Investigation of Ukraine has established the involvement of three officers of the Cyber Department of the Security Service (SBU) in the kidnapping of a cryptocurrency trader and the theft of money from him. This is reported in the ruling of the Pechersky District Court of Kyiv.
According to the investigation, in autumn 2020, senior management of the SBU received information that the entrepreneur had a large amount of cryptocurrency.
In broad daylight on 1 October 2020 in Kyiv, outside a pub on Mykhailivska Street, security forces approached the businessman and shoved him into a Volkswagen T5. In the car they took the victim’s mobile phone and keys to the apartment, from which two laptops and a tablet were subsequently removed.
Then they brought the trader to a forest near Parkova Road and, for about an hour and a half, beat him inside the car and demanded to hand over $200 000. After the refusal, the security forces transported the kidnapped person to the Shevchenkivske Police Department.
There they continued to extort funds, lowering the amount to $80 000. The businessman agreed and called his wife, who transferred 7 BTC (at the time equivalent to the ransom) to the cryptocurrency wallet indicated by the security forces.
After this, one of the SBU officers filed a report stating that the entrepreneur had allegedly been detained by them late on 1 October as a person wanted for extradition at the request of the Russian Federation.
According to the State Bureau of Investigation, the criminal group included:
Deputy Head of the First Directorate of the Department of Counterintelligence Protection of State Interests in the Information Security sphere of the SBU;
Head of the Department of Counterintelligence Protection of State Interests in the Information Security sphere of the SBU’s Sumy Region Directorate;
Senior operative of the 3rd Department of the 1st Directorate of the Department of Counterintelligence Protection of State Interests in the Information Security sphere of the SBU.
They were charged with theft of cryptocurrency, robbery with violence, kidnapping, and abuse of office.
All three suspects were placed under house arrest. They have been suspended from their posts.
The investigation is also examining the involvement of eight more SBU employees.
------------------------------------------------------------------------------------------------
ARTICLE 3
Source Bastion, Forklog, FB
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 71, column "Article 3"
Length 2,001 chars
------------------------------------------------------------------------------------------------
Heads of the SBU cyber department kidnapped and took the entrepreneur to the forest, tortured and forced to give up 7 bitcoins
The Police Control Ukraine project writes that law enforcement officers have been suspected of the fact of theft of cryptocurrency, robbery, linked with violence, kidnapping and exceeding official powers. They are currently removed from office.
On October 1, 2020 right in the center of Kyiv on the street mikhailivs ціkíj, the staff of the sbu ran to the entrepreneur and pushed him to the salon of the car "Volkswagen T5".
SBUšniki took his apartment keys and iPhone. After that, two sbušnikív headed to the apartment, and the others continued to keep the man in the car. Through threats, special forces received passwords from the phone.
In the apartment, the employees of the world's best intelligence services took two laptops and a tablet.
The entrepreneur was then brought to the woods near the Park Road in the city of Kyiv For 1.5 hours, he was beaten with dumb hard objects.
Later, one of the SBU workers began to demand 200 thousand dollars. The entrepreneur refused, so he was taken to the Shevchenko Police Department in Kyiv There he was held without fixing the fact of arrest or detention.
Later, the businessman was asked for $80,000. He agreed and called his wife. From her electronic wallet, she transferred the details of 7 bitcoins (BTC), which as of the day and time of the transaction cost $ 80,000.
Subsequently, a senior officer from the Department of Counterintelligence Protection of the State Interests in the field of information security of the SB of Ukraine Volkov B.C. compiled a report on the arrest of a man on Independence Square in Kyiv as a wanted person and in need of extradition to Russia. Later, the man was transferred to the Shevchenko Police Department. How he ended up free is still unclear.
This is such an eloquent story about law enforcers who are still found in the highly reformed police and the Security Service of Ukraine.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 070
================================================================================================
merge-output/sources/071_Mike-s-Produce.txt
+151
View File
@@ -0,0 +1,151 @@
================================================================================================
CASE 071 | Mike's Produce | October 7, 2020 | Canada
================================================================================================
DATABASE RECORD
id 71
date October 7, 2020
original_date October 7, 2020
year 2020
month 10
quarter 2020-Q4
victim Mike's Produce
location Kelowna, BC, Canada
country Canada
scenario Armed Robbery in Public Space
description Botched Bitcoin theft destroys deli
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 0
theft 0
life_taken 0
money_wanted Undisclosed
coin_type Bitcoin ATM
reports YT, Hodlhard, CT
notes failed attempt - Bitcoin ATM robbery
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Mike's Produce
**Attackers:** Unknown number of perpetrators
**Attack Method:** Armed Robbery in Public Space
**Violence Used:** Threats/intimidation
**Crypto Stolen:** Undisclosed in Bitcoin ATM
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://cointelegraph.com/news/bungled-bitcoin-atm-theft-in-meatspace-won-t-ruin-thanksgiving
NOTES ON THIS FILE
* matched to sheet row 72: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source YT, Hodlhard, CT
URL https://cointelegraph.com/news/bungled-bitcoin-atm-theft-in-meatspace-won-t-ruin-thanksgiving
Origin reported_K&R sheet, row 72, column "Articles"
Length 2,372 chars
------------------------------------------------------------------------------------------------
Botched Bitcoin theft leaves long-time Kelowna deli out of commission
A long-time Kelowna business has been taken out of commission due to an attempted break-and-enter.
L&D Meats and Deli was not the original target of an early morning break-in today but was severely damaged nonetheless.
The target: a Bitcoin machine next door at Mike’s Produce, was what the two suspects were after.
After breaking into the produce store, located at the Guisachan Village Centre, the two suspects allegedly tried to steal the machine, located against the back wall of the shop. A store employee explained that when they were unable to get it out, they fled, backing into L&D Meats and Deli and smashing through the front wall.
L&D Meats and Deli owner Don Favell said the timing for this couldn’t have been much worse, as Thanksgiving is just around the corner and customers are expecting their pre-ordered meat. However, even though the deli no longer has a storefront, Favell assured that people will get their orders.
“They will get their turkeys,” he said.
Favell has been in operation since 1996, and besides being robbed in the first year he was open, hasn’t had something like this happen since. Fortunately, Favell said the damages will be covered under insurance. For now, he said they’re focused on moving forward.
“Trying to get it up and running, that’s all we can do, look after everybody,” he said.
line
A foiled attempt to steal a Bitcoin ATM early this morning (Oct. 7) left a Kelowna business heavily damaged.
Two suspects, sought by police, allegedly rammed a white GMC Sierra pick-up truck into the exterior entrance of the building in an attempt to gain entry.
Numerous attempts to ram the building caused heavy damage to the exterior, which according to Kelowna RCMP will cost thousands of dollars to repair. Police say the two suspects fled the scene in the pickup, leaving behind a tailgate.
The break-and-enter attempt took place just after 3 a.m. in the 2000-block of Gordon Drive.
“A preliminary assessment conducted by staff on-site, suggests that despite the thousands of dollars in damage caused, nothing appears to be taken from inside the business as the suspects were unsuccessful in taking the Bitcoin ATM,” said Cst. Solana Paré, spokesperson for the Kelowna RCMP. “Forensic investigators were called upon to examine the scene for physical evidence.”
------------------------------------------------------------------------------------------------
ARTICLE 2
Source YT, Hodlhard, CT
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 72, column "Article 2"
Length 2,866 chars
------------------------------------------------------------------------------------------------
Store Suffers From Collateral Damage In Bitcoin ATM Heist
hodler
A deli in Kelowna, British Columbia, was the unfortunate target of a Bitcoin ATM heist gone wrong. L&D Meats and Deli bore the brunt of the attempted theft despite having nothing to do with BTC or the machine.
Anatomy of a Failed Bitcoin ATM Heist
Here is how this unfortunate event unfolded about a week ago. This was right before Canadian Thanksgiving.
Thieves targeted a Bitcoin ATM at a produce store called Mike’s Produce
Mike’s Produce hosts a Bitcoin ATM
That ATM is apparently bolted to the wall
L&D Meats and Deli is the store right beside Mike’s and it shares the wall where the Bitcoin ATM was placed with the produce store
The thieves approached Mike’s at around 3 am on October 7th, 2020
They broke into the produce store to steal the BTC ATM, but failed to take the machine
As a result of their failure, the thieves understood that the ATM was right by the wall that the produce shop shares with L&D
That is when the thieves rammed their truck – a GMC Sierra pickup truck – into the deli
Their goal was to get to the ATM from the other side of the wall
The thieves ultimately failed to take the Bitcoin ATM, but the damage was done
Putting the Bitcoin ATM Heist into Context
It is important to get a more in-depth understanding of what happened here.
Firstly, it seems that L&D got hit at a critical point in time:
Canadian Thanksgiving is held on the second Monday in October
Just like their US neighbors, Canadians traditionally eat turkey on Thanksgiving
Being a meat shop, L&D Meats and Deli was getting ready to distribute the turkeys its customers had ordered
This is a great opportunity for delis and meat shops to enhance their revenue
Since 2020 has been a tough year for businesses due to the pandemic, Thanksgiving sales are especially important for delis this time around
Clearly this was a devastating blow for L&D Meats and Deli, as it must have been for Mike’s Produce. But it is crucial to understand the Bitcoin angle here as well.
Bitcoin is not to Blame
Obviously, BTC is not to blame here. Bitcoin ATMs are an attractive target, but so is any other kind of ATM. Here is what you should keep in mind:
Covid-19 and government response to the pandemic, have worsened the economic conditions of millions of people
As a result, crime increased in general
On the other hand, Bitcoin ATMs might not even have any money in them; we doubt they have any private keys either
L&D Meats and Deli store front before the attempted Bitcoin ATM heist. L&D managed to distribute all the Thanksgiving turkey its customers ordered despite the destruction
Nevertheless, this might make businesses more apprehensive about the choice of ATMs they host. If Bitcoin ATM heists become more popular, it could also lead insurance companies to hike premiums on businesses that host them.
------------------------------------------------------------------------------------------------
ARTICLE 3
Source YT, Hodlhard, CT
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 72, column "Article 3"
Length 1,926 chars
------------------------------------------------------------------------------------------------
Bungled Bitcoin ATM theft in ‘meatspace’ won't ruin Thanksgiving
Two thieves have destroyed the front wall of a deli in Canada after a failed attempt to steal a Bitcoin ATM.
A delicatessen in the Canadian town of Kelowna, British Colombia has been severely damaged after two bumbling crooks attempted to steal a Bitcoin ATM installed in a store adjacent to it.
At roughly 3am on October 7, the two suspects unsuccessfully attempted to steal the Bitcoin ATM located on the back wall of the neighbouring store. While attempting to flee empty-handed they backed their white GMC Sierra pick-up truck into L&D Meats and Deli and smashed its front wall.
The chance they’ll be caught seems quite high, as local police noted that the thieves managed to leave their tailgate behind. Solana Paré, a spokesperson for Kelowna police stated:
“A preliminary assessment conducted by staff on-site, suggests that despite the thousands of dollars in damage caused, nothing appears to be taken from inside the business as the suspects were unsuccessful in taking the Bitcoin ATM.”
Given how inept the attempted theft was, you have to wonder if the criminals were hoping to steal the “Bitcoins’ inside the machine, or if they were after cash.
The deli’s owner Don Favell lamented the timing of the incident, noting that Thanksgiving is quickly approaching and his customers are expecting to receive pre-ordered meat before the holiday.
Favell said the damages will be covered by his insurance and that he is now focused on trying to get his business up and running again. He told local media: “That’s all we can do, look after everybody.”
“They will get their turkeys,” he vowed.
Bitcoin ATM theft does not appear to attract the most sophisticated of criminals. In November 201, two thieves broke into a grocery store in British Colombia to crack open a Bitcoin ATM installed inside. They stole $4,000 but accidentally left $50,000 behi.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 071
================================================================================================
merge-output/sources/072_Undisclosed.txt
+97
View File
@@ -0,0 +1,97 @@
================================================================================================
CASE 072 | Undisclosed | October 22, 2020 | Latvia
================================================================================================
DATABASE RECORD
id 72
date October 22, 2020
original_date October 22, 2020
year 2020
month 10
quarter 2020-Q4
victim Undisclosed
location Riga, Latvia
country Latvia
scenario Dodged Attack
description Man arrested for planning kidnapping and killing owners of cryptocurrencies
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 0
theft 0
life_taken 0
money_wanted 500,000 euros
coin_type Crypto
reports Forklog, Sputnik news
notes failed attempt - arrested before the kidnapping
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Undisclosed
**Attackers:** Unknown number of perpetrators
**Attack Method:** Dodged Attack
**Violence Used:** Threats/intimidation
**Crypto Stolen:** 500,000 euros in Crypto
**Status:** Arrests made
LINKED SOURCES
[url] https://forklog.com/news/zhitel-latvii-planiroval-ubijstvo-vladeltsev-kriptovalyut-na-polmilliona-evro
NOTES ON THIS FILE
* matched to sheet row 73: exact date + country, unique candidate
------------------------------------------------------------------------------------------------
ARTICLE 1
Source Forklog, Sputnik news
URL https://forklog.com/news/zhitel-latvii-planiroval-ubijstvo-vladeltsev-kriptovalyut-na-polmilliona-evro
Origin reported_K&R sheet, row 73, column "Articles"
Length 1,420 chars
------------------------------------------------------------------------------------------------
Latvian resident planned the murder of cryptocurrency owners for half a million euros
The State Police of Latvia prevented the kidnapping and murder of two people planned by a criminal aiming to obtain cryptocurrency valued at about 500,000 euros.
Law enforcement received information about the planned crime in September. They found out that a Riga resident was seeking criminal accomplices to carry out the kidnapping. The criminal intended to force the victims to transfer their cryptocurrency to a specified wallet and then kill them.
During surveillance of the organizer, operatives established that he was already tracking one victim, learning their routes and daily routines. The criminal also prepared torture tools intended to be used if the victim refused to provide passwords to their cryptocurrency wallets.
Police later learned that a similar kidnapping and murder plot was planned for another person. Through these two kidnappings, the organizer aimed to obtain cryptocurrency worth 500,000 euros.
He was detained on October 7 while waiting to abduct the victim. The suspect fully admitted his guilt.
He had previous convictions, including for fraud. The Riga resident was arrested by court order for the duration of the investigation.
Recall that in April, a Moscow court began examining the case of four defendants accused of attempting to kidnap and murder a city entrepreneur to extort bitcoins.
------------------------------------------------------------------------------------------------
ARTICLE 2
Source Forklog, Sputnik news
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 73, column "Article 2"
Length 1,686 chars
------------------------------------------------------------------------------------------------
State Police prevented two murders related to cryptocurrency
Riga, October 22 — Sputnik. The State Police arrested a resident of Riga who planned to kidnap and kill two people to seize cryptocurrency belonging to them worth about half a million euros, according to the State Police website.
In September, officers from the 1st Department of the Criminal Investigation Department of the Main Criminal Police Directorate, as a result of operational work, intercepted information that a Riga resident born in 1989 planned to kidnap and then kill a person to illegally obtain his cryptocurrency. To carry out his plan, he actively sought someone in the criminal abroad environment to commit the crime.
A criminal case was initiated under Part 3 of Article 15 and Part 1 of Article 153 of the Criminal Law—on preparation for kidnapping.
During the investigation, evidence was obtained showing that the man monitored the victim, determining his routes and daily routine, after which he chose a place for kidnapping and a place to hold the victim for extortion of cryptocurrency. If the victim refused to voluntarily provide cryptocurrency wallet data, the man intended to torture him.
It was also revealed that similarly, the man planned to kidnap and kill another person involved in cryptocurrency transactions.
As a result of kidnapping and killing two people, the suspect planned to acquire cryptocurrency and cash totaling about 500,000 euros.
On October 7, the anti-terrorist squad "Omega" detained the crime organizer in the Teika district of Riga. The detainee fully confessed to planning the crime and was placed under arrest. The man had previous convictions, including fraud.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 072
================================================================================================
merge-output/sources/073_Undisclosed.txt
+94
View File
@@ -0,0 +1,94 @@
================================================================================================
CASE 073 | Undisclosed | December ?, 2020 | UAE
================================================================================================
DATABASE RECORD
id 73
date December ?, 2020
original_date December ?, 2020
year 2020
month 12
quarter 2020-Q4
victim Undisclosed
location Dubai, UAE
country UAE
scenario Dodged Attack
description 4 Ukrainian men attack Bitcoin buyer with deodorant. Victims scream for help, attackers flee.
kidnappings 0
violence_torture 1
drugs_alcohol 0
weapons 1
theft 0
life_taken 0
money_wanted Dh500,000
coin_type Cash
reports GulfNews, Gulf today
notes failed attempt - the victims screamed for help after they were ambushed while waiting for a p2p trade seller to appear
has_processed_date 0
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Undisclosed
**Attackers:** Unknown number of perpetrators
**Attack Method:** Dodged Attack
**Violence Used:** Physical violence
**Crypto Stolen:** Dh500,000 in Cash
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://gulfnews.com/uae/crime/attempt-to-rob-dh500000-foiled-in-dubai-gang-of-four-members-arrested-1.76204045
NOTES ON THIS FILE
* matched to sheet row 74: identical source URL plus corroborating article text, approved
------------------------------------------------------------------------------------------------
ARTICLE 1
Source GulfNews, Gulf today
URL https://gulfnews.com/uae/crime/attempt-to-rob-dh500000-foiled-in-dubai-gang-of-four-members-arrested-1.76204045
Origin reported_K&R sheet, row 74, column "Articles"
Length 1,572 chars
------------------------------------------------------------------------------------------------
Attempt to rob Dh500,000 foiled in Dubai, gang of four members arrested
Defendants attacked bitcoin buyer and his friends and sprayed deodorants on their faces
Robbers in Dubai tried to snatch Dh500,000 in cash from an investor who wanted to buy bitcoins. Picture for illustrative purposes only.
Image Credit: Gulf News Archives
Dubai: A group of four Dubai-based expatriates has been accused of attempted robbery of Dh500,000 from an investor in a fraudulent bitcoin transaction.
According to the Dubai Court of First Instance, the four Ukrainian defendants aged between 28 and 34 years, broke into an office in the Al Barsha area of Dubai and tried to steal the cryptocurrency after attacking the investor and two of his friends.
A 33-year-old Egyptian witness, who was told by the investor and another person to join them in buying the cryptocurrency, said that he went to the office carrying Dh500,000 in cash in a bag. “A man told us to wait until the arrival of the bitcoin seller. As they were getting late, the victim told the man that they would leave, when the door opened and the four Ukrainian suspects came in, attacked the victim and tried to steal the money,” said the Egyptian witness.
The four defendants physically assaulted the victims and sprayed a deodorant directly on to the victims’ faces.
“As the victim raised an alarm, screaming ‘thieves ... thieves’ the attackers couldn’t steal the money and they escaped from the spot,” added the Egyptian witness.
Dubai Police have arrested all the four defendants who were charged with attempted robbery.
------------------------------------------------------------------------------------------------
ARTICLE 2
Source GulfNews, Gulf today
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 74, column "Article 2"
Length 1,219 chars
------------------------------------------------------------------------------------------------
European gang attempts to rob Dhs500,000 from three Arabs
The Dubai Public Prosecution arrested and referred a four-member European gang of to the criminal court for attempting to rob three Arabs of Dhs500,000 during a bitcoin exchange deal in Dubai.
The incident dates back to August 2019.
One of the victims filed a report against the four defendants, claiming that they attempted to rob his money during his visit to an office, which was trading in bitcoin.
The victim testified that he was in the company of two of his friends, with a bag of Dhs500,000, to buy bitcoin with a value less than the market.
The victims were asked to wait for the office to open. The Arabs were suddenly interrupted by the Europeans.
The four of them assaulted the victims and tried to take away the bag of money, but luckily, the victims were screaming loudly and one of them had used his body deodorant to spray on the robbers’ faces.
The defendants got scared and left the scene before being able to rob the Arabs of Dhs500,000. Police identified the defendants and successfully apprehended each one of them.
The defendants confessed to being engaged in a fight with the victims, but with no intention of stealing their money.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 073
================================================================================================
merge-output/sources/074_Undisclosed.txt
+120
View File
@@ -0,0 +1,120 @@
================================================================================================
CASE 074 | Undisclosed | December 24, 2020 | Ukraine
================================================================================================
DATABASE RECORD
id 74
date December 24, 2020
original_date December 24, 2020
year 2020
month 12
quarter 2020-Q4
victim Undisclosed
location Ternopil, Ukraine
country Ukraine
scenario Kidnapping
description Man kidnapped and tortured for $800k
kidnappings 1
violence_torture 1
drugs_alcohol 0
weapons 0
theft 1
life_taken 0
money_wanted $800,000
coin_type Undisclosed
reports NPU.gov, YT, LB.ua
notes he and his wife were kidnapped, he was tortured and they stole his car. The victim called the cops with a 2nd phone
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Undisclosed
**Attackers:** Unknown number of perpetrators
**Attack Method:** Kidnapping for ransom
**Violence Used:** Torture
**Crypto Stolen:** Approximately $800k
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://lb.ua/news/2020/12/24/473829_ternopoli_zatrimali.html
NOTES ON THIS FILE
* matched to sheet row 75: exact date + country, unique candidate
------------------------------------------------------------------------------------------------
ARTICLE 1
Source NPU.gov, YT, LB.ua
URL https://lb.ua/news/2020/12/24/473829_ternopoli_zatrimali.html
Origin reported_K&R sheet, row 75, column "Articles"
Length 2,550 chars
------------------------------------------------------------------------------------------------
Operatives in Ternopil arrested a group who stole a car, deprived a man of his freedom, and extorted $800,000 from him
Illegal deprivation of liberty, extortion, and illegal seizure of a vehicle are three articles of the Ukrainian Criminal Code under which law enforcement officers in Ternopil charged several local residents.
According to Vitaliy Hatanyuk, Deputy Head of the Department for Investigating Especially Serious Crimes of the Main Directorate of the National Police in Ternopil region, the group held and tortured a man from the region overnight.
The man now lives in Kyiv and is involved in a cryptocurrency-related business. He had come to Ternopil with his wife to visit a relative for a birthday.
Around 7 p.m., as he was leaving Ternopil, a group of unknown persons blocked his way with three cars. They pulled him out of his car, handcuffed him, forced him into the trunk of a foreign car, and took his wife in another car in an unknown direction. The criminals also stole his Toyota Camry.
The victim himself reported the crime and his location early in the morning after a night of torture. The kidnappers did not find his second phone during a search. According to the victim, the kidnappers tortured him and threatened to kill him if he did not pay $800,000.
Operatives from the criminal investigation, investigators, patrol police, and the special KORD unit responded to the crime scene, but the criminals escaped.
Following quick action under procedural guidance from the Ternopil local prosecutor’s office, police arrested two of the seven suspects—a co-organizer and a perpetrator. They were placed in custody with bail set at 630,000 and 500,000 hryvnias respectively.
Another kidnapper was caught a day and a half after the crime. The organizer surrendered voluntarily. He is already facing criminal charges in court for drug trafficking as part of an organized crime group.
The whereabouts of three suspects remain unknown; one has reportedly crossed the border. The wife was found and had been held in a Ternopil hotel without physical violence.
The stolen vehicle was found a few kilometers from the crime scene.
All suspects have been charged under three articles of the Ukrainian Criminal Code:
Article 146 – Illegal deprivation of liberty or kidnapping by prior conspiracy;
Article 189 – Repeated or group extortion through conspiracy;
Article 289 – Illegal seizure of a vehicle by an organized group or combined with violence dangerous to the victim’s life or health.
The investigation is ongoing.
------------------------------------------------------------------------------------------------
ARTICLE 2
Source NPU.gov, YT, LB.ua
URL (no URL recorded for this column)
Origin reported_K&R sheet, row 75, column "Article 2"
Length 2,260 chars
------------------------------------------------------------------------------------------------
Car thieves who tortured a man and extorted $800,000 were detained in Ternopil
The organizer, co-organizer, and perpetrator were detained.
Car thieves who tortured a man and extorted $800,000 from him were detained in Ternopil . They are charged with three articles of the Criminal Code: illegal deprivation of liberty, extortion, and illegal seizure of a vehicle.
This was reported by the press service of the Ministry of Internal Affairs.
According to Vitaliy Hatanyuk, deputy head of the department for the investigation of especially serious crimes of the Ternopil region's Main Police Department, a group of unknown persons held and tortured a native of the region during the night. The man lives in Kyiv and is engaged in a business related to cryptocurrency. He and his wife came to Ternopil to visit a relative for his birthday.
On the way out of the city at about 19:00, a group of unknown people blocked his way in three cars. The attackers pulled the man out of the car and forcibly pushed him into the trunk of the foreign car, putting handcuffs on his hands. The wife was put in another car and taken in an unknown direction. The attackers also stole a Toyota Camry car.
The victim himself reported the crime and his whereabouts the morning after the night of torture. The kidnappers did not find a second phone on him. According to the victim, the unknown people tortured him and threatened to kill him if he did not pay them $800,000.
Law enforcement officers managed to detain two of the seven suspects - the co-organizer and the perpetrator. They were given a preventive measure in the form of detention with the right to post bail in the amount of 630 and 500 thousand hryvnias, respectively. Another kidnapper was detained a day and a half later. The organizer also came and surrendered to the police on his own. Criminal proceedings are pending against him in court for drug trafficking as part of an organized criminal group.
The whereabouts of three more suspects are being established. It is currently known that one of the group has already crossed the border.
The victim's wife was held in a hotel in Ternopil. No physical force was used against her.
Police officers found the stolen car a few kilometers from the crime scene.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 074
================================================================================================
merge-output/sources/076_37-y-o-man.txt
+85
View File
@@ -0,0 +1,85 @@
================================================================================================
CASE 076 | 37 y/o man | January 5, 2021 | Hong Kong
================================================================================================
DATABASE RECORD
id 76
date January 5, 2021
original_date January 5, 2021
year 2021
month 1
quarter 2021-Q1
victim 37 y/o man
location Chai Wan, Hong Kong
country Hong Kong
scenario P2P Trade Gone Wrong
description Robbers take US$387,000 in cash, 15BTC from man after in-person trade
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 1
theft 1
life_taken 0
money_wanted 15 bitcoin
$387.000 in cash
coin_type BTC+Cash
reports The Standard
notes apparently fake p2p trade setup turned into stolen cash and transferred crypto
has_processed_date 1
created_at 2025-11-13 05:44:45
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** 37 y/o man
**Attackers:** Unknown number of perpetrators
**Attack Method:** P2P Trade Gone Wrong
**Violence Used:** Threats/intimidation
**Crypto Stolen:** 15 bitcoin
$387.000 in cash in BTC+Cash
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://www.thestandard.com.hk/breaking-news/article/162670/Gang-of-six-rob-more-than-HK3-million-in-bitcoin-from-trader-flee-after-kicking-him-out-of-the-car
NOTES ON THIS FILE
* matched to sheet row 77: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source The Standard
URL https://www.thestandard.com.hk/breaking-news/article/162670/Gang-of-six-rob-more-than-HK3-million-in-bitcoin-from-trader-flee-after-kicking-him-out-of-the-car
Origin reported_K&R sheet, row 77, column "Articles"
Length 3,254 chars
------------------------------------------------------------------------------------------------
Gang of six rob more than HK$3 million in bitcoin from trader, flee after kicking him out of the car
A 37-year-old male trader trying to capitalize on the surge of Bitcoin was robbed of around HK$3 million in cash -- the value of 15 bitcoins -- and two mobile phones, minutes after being lured into in-person transaction of the cryptocurrency.
The incident comes as more traders who want to avoid the hassle of paying the service fee of online Bitcoin transactions choose to sell bitcoins in person.
A gang of six South Asian men in their 30s remain at large after fleeing on Tai Tam Road, Chai Wan in two cars.
The trader surnamed Lee was left empty-handed, after the suspects ran away with HK$3 million cash that they pretended to pay him and Lee's 15 bitcoins worth HK$235,000 each were transferred to bitcoin wallet, according to police.
Lee told police that he was picked up by two South Asian men posing as buyers in a white car outside a hotel in North Point around 5pm on Monday.
He was then driven to Chai Wan, during which he transferred 15 bitcoins to the duo on his mobile phones, while the pair handed him HK$3 million in cash.
But as Lee was counting his proceeds, the car pulled over on a hillside near Shan Tsui Court on Tai Tam Road.
Shortly afterwards, a black car arrived and four South Asian men jumped into the white car, snatched the banknotes and two mobile phones before fleeing the scene in the black car.
Later, the two buyers shouted at Lee: “Money is gone, get off my car!” and kicked him out of the car before driving away.
The incident came to light at around 8pm when Lee walked for about five minutes and approached a police officer at the nearby Hing Man Estate on Tai Tam Road.
Lee was not injured as police combed Hing Man Estate late Monday evening but to no avail.
The six suspects remained at large as of last night.
The case has been classified as robbery and is being investigated by the Eastern District Crime Squad.
Lee, who has been a full-time Bitcoin trader for seven years, agreed to make the transaction with the two buyers via WeChat at 1pm Monday.
He had also traded his bitcoins with the two for HK$1 million online Sunday night.
In 2018, a 34-year-old local male buyer was robbed of HK$1.4 million in cash following an in-person Bitcoin transaction hoax in North Point.
Trading bitcoins in person has become popular recently, in which the buyer will clarify the acceptable currencies, banknotes and payment forms with traders beforehand, as banks are more aggressively acting against Bitcoin companies.
Other means to purchase bitcoins, including through a Bitcoin ATM, a “Bitcoin Wallet” that can be downloaded on phones and computers and exchanges, are also popular.
The price of Bitcoin has surged five times in less than a year and hit an all-time high last Christmas and early this month.
At midnight yesterday, the price per bitcoin broke through US$31,000 (HK$ 240,335), according to CryptoCompare, a website that discusses the value of various cryptocurrencies.
About 18.5 million out of a total of 21 million bitcoins have been mined and all the bitcoins will be snapped up by 2040.
Once all the bitcoins have been mined, buyers will still be incentivized to process transactions with fees.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 076
================================================================================================

Some files were not shown because too many files have changed in this diff Show More