Operation Themis: NABU and SAP Uncover Raiding Scheme Worth Hundreds of Millions

The National Anti-Corruption Bureau of Ukraine (NABU) has disclosed a complex raiding scheme that allegedly involved unauthorized interference in the information networks of the Ukrainian Ministry of Justice, alongside the forgery of court rulings and ownership documents.
Reports suggest that both current and former members of parliament, high-ranking officials from the President’s Office, judges, and hackers were implicated in the scheme. The investigation revealed that the value of assets unlawfully seized by participants reached over UAH 248 million in the fall of 2025. Furthermore, attempts were made in May 2026 to seize real estate worth more than UAH 207 million in the capital.
One highlighted case involved properties located in central Kyiv valued at over UAH 500 million.
According to NABU, the scheme was executed with the assistance of hackers posing as state registrars who infiltrated the register of legal entities to submit forged documents and false information regarding the transfer of ownership rights from legitimate owners to front individuals.
Investigators claim that participants then altered corporate rights of the seized enterprises to be held by individuals who were essentially the security personnel of one of the co-organizers of the crime.
To maintain control over the appropriated businesses, they attempted to influence high-ranking officials at the Ministry of Justice. However, officials refused to carry out illegal orders from the Deputy Head of the President’s Office, thereby preventing the full execution of the illegal scheme.
The investigation also established that financing for the organization, amounting to no less than $514,000, was provided by a current member of parliament.
On August 19, authorities announced charges against participants of the criminal scheme for misappropriation and embezzlement of property, raiding of assets, forgery of documents, and unauthorized interference in information systems.
Context
- On August 19, NABU announced a joint operation with SAP to expose a criminal organization led by current and former MPs, involving high-ranking officials from the President’s Office and others. This operation was named “Forest Gump.”
- According to law enforcement, the group organized and facilitated the legalization of UAH 150 million obtained through criminal means, using the state bank AТ Sense Bank and accounts of controlled enterprises.
- Media reports have suggested that individuals under investigation include MP Vadim Stolar, former MP Maxim Mykyta, and the Deputy Head of the President’s Office, Iryna Mudra, who has since been dismissed by President Volodymyr Zelensky. Stolar confirmed that NABU detectives conducted searches at his home.
- Amid the investigation, the Cabinet of Ministers of Ukraine decided to suspend Mykola Hladysheko, the head of the supervisory board of Sense Bank. The National Bank of Ukraine’s committee on supervision and regulation later stated that Hladysheko did not meet the established legislative criteria for independence.




