Following the chat leak, a dossier circulated asserting the true identity of the operation’s leader — known in the archive by handles including GG and Tramp — and giving a name and patronymic.
That name has been widely republished. It does not appear in this corpus, and this file exists to say why.
The Standard, Restated
This desk names individuals after conviction, not after arrest. The rule was set at 25-0724, where four people arrested in the United Kingdom were not named and one person convicted in the United States was. It was restated at 25-1205.
A research dossier is a weaker basis than an arrest. Nobody has been charged. No court has tested the identification, no defence has answered it, and the underlying analysis is not published in a form this desk could evaluate.
The Rule Is Not There To Protect The Subject
It is there because publication is not reversible and because this corpus has no ability to correct a wrong identification once it has propagated. The asymmetry is total: the cost of waiting is that a name appears here later than elsewhere, and the cost of being wrong is borne by whoever is named.
Applying it to a ransomware leader is the case that tests whether it is a rule or a preference. If it only holds for sympathetic subjects it is not a rule.
What Can Be Said
The handles are in the archive and are not identifications: GG, Tramp, Lapa and others appear as usernames with roles attached. Referring to a handle asserts nothing about a person.
That an international notice has reportedly been issued in connection with the operation is a fact about a process, and this desk records it as such without adopting the identification it rests on.
This Is Graded Low Deliberately
The grade attaches to what is established, not to how confident the sources sound. On the identification, almost nothing is established, and a file that reported the dossier’s claim at medium would be using the grade to launder it.
The corpus filed at 25-1114 that the grade is sometimes the most important thing in a file. This is another of those.
It records a decision rather than an incident. The dossier’s claimed identification is described here but the asserted name is deliberately not printed, under the standard set at 25-0724: this desk names individuals after conviction, not after arrest, and a research assertion is weaker than an arrest. Graded low because the identification is unestablished, not because the sources are unreliable. Corrections: corrections@forensicpost.com.