Kazakh Deputy Prosecutor-General Ulan Baizhanov has confirmed that Kazakh authorities have detained Russian IT expert Nikita Kislitsin at the request of the United States.
Baizhanov said on June 29 that Kazakh authorities had also received a request from Russian officials to extradite the senior executive at F.A.C.C.T. (formerly Group-IB) company, one of Russia’s top cybersecurity firms.
Baizhanov explained that Astana will now request detailed information about the case against Kislitsin from the United States.
"We will analyze if the allegations are, in fact, a crime, after which we will decide on extradition. The process may last longer, if [Kislitsin] officially asks Kazakhstan for asylum," Baizhanov said.
Speaking about Moscow's request to extradite Kislitsin to Russia, Baizhanov said, "[Russian officials] must prove that he violated a law there. If [Kislitsin], as a Russian citizen, expresses his intention to return there, then a corresponding decision will be made with taking all the details into account."
Kislitsin, a senior executive at one of Russia’s top cybersecurity firms, was detained after he landed in Almaty on June 22, Russian media reported.
The United States has accused Kislitsin of buying personal data obtained through the 2012 hack of Formspring, a now-defunct social media site that allowed users to receive answers to questions.
Russia has protested the detention, calling on Kazakhstan not to carry out the U.S. request.
A top Russian diplomat in Kazakhstan, Consul-General Yevgeny Bobrov, was quoted in Russian media reports on June 28 as saying that the diplomatic mission had sent a note to the Central Asian nation's Foreign Ministry, urging it not to move quickly on the extradition.
Bobrov's note included requests to give full details of Kislitsin’s detainment on June 22, provide Russian diplomats access to Kislitsin, and not to extradite the Russian citizen to the United States in an expedited manner, TASS and RIA Novosti news agencies said.
In the meantime, Russia filed its own extradition request after suddenly filing criminal case against Kislitsen. The Tver district court in Moscow said it issued an arrest warrant for Kislitsin in connection with an investigation into illegal access to computer data in Russia, adding that a legal request will be sent to Kazakhstan to extradite Kislitsin to Russia.
The case is the latest in a long series of court battles between Washington and Moscow for alleged Russian hackers detained at the request of the United States in third countries.
The United States has over the past decade successfully extradited dozens of Russian citizens charged with cybercrimes from third countries, especially Western nations, leading Moscow to accuse Washington of “hunting” Russians.
The extradition of Kislitsen could be tougher than other cases because of Russia’s close ties with -- and influence over -- neighboring Kazakhstan, a former Soviet state.
“If Kazakhstan wants to be prudent, it may delay the extradition” to see how things shake out in Russia, William Courtney, the former U.S. ambassador to Kazakhstan from 1992-95 and an analyst at the Washington-based think tank Rand Corp, told RFE/RL. “Kazakhstan has to manage their risks.”
FBI Interview
Kislitsin, a prominent member of the Russian cyber underground in the early 2010s, was interviewed by the FBI in Moscow nearly a decade ago as part of an investigation into the hack of several U.S.-based companies, including LinkedIn, Dropbox, and Formspring. He was later charged with buying personal data from the Formspring hack.
SEE ALSO: Sachkov's Revenge: Jailed On Treason Charges, A Russian Cybersecurity Exec Goes On The OffensiveInvestigators in the United States say Kislitsin and his associates stole personal data and passwords of 117 million people and offered them to potential buyers.
In his meeting with FBI agents, Kislitsin was notified of his rights by the FBI agents, according to filings in U.S. federal court. Kislitsin indicated that he was “open for collaboration” and wanted to “mitigate problems.”
Kislitsin's current employer, F.A.C.C.T., confirmed on June 28 that Kislitsin is under temporary detention in Kazakhstan at the request of the United States.
“According to the information available to us, the claims against Kislitsin are not related to his work at F.A.C.C.T., but are related to a case more than 10 years ago, when Nikita worked as a journalist and independent researcher,” the company said in a news release.
The company also disputed his detention in Kazakhstan, saying it believes there are there are no legal grounds for it.
The U.S. State Department told RFE/RL in an e-mail that it does not comment on pending extradition matters, including whether or not a particular request has been made.
Yevgeny Nikulin, the mastermind of the hacks of the U.S. companies and an acquaintance of Kislitsin, was extradited to the United States from the Czech Republic in 2018 and sentenced to more than seven years in prison. He was released from jail earlier this year and deported back to Russia.
Prior to being charged by the United States, Kislitsin in 2013 joined Group-IB, one of the most prominent Russian cybersecurity firms.
Group-IB has gained international recognition over the years, signing an agreement with Interpol in 2017 to become an official private-sector partner of the international crime fighting organization.
In September 2021, Russia arrested Group-IB co-founder Ilya Sachkov, a well-respected cybersecurity expert, accusing him of treason.
Sachkov, who was a recipient of a Kremlin award two years earlier, asked Russian President Vladimir Putin to transfer him to house arrest to no avail.
His case was finally turned over to a Moscow court earlier this month. A trial date has yet to be set. He faces up to 20 years in prison.
Following sanctions imposed on Russia for its full-scale invasion of Ukraine, Group-IB spun off its Russia business to focus on international markets.
After the split, Kislitsin remained with the independent Russian business, which is now called F.A.C.C.T.