Operation "Themis": NABU and SAP exposed a raider scheme involving MPs and officials of the President's Office

On the morning of August 19, 2026, the National Anti-Corruption Bureau of Ukraine (NABU) and the Specialized Anti-Corruption Prosecutor's Office (SAP) publicly announced a joint special operation named "Themis". According to law enforcement officials, the operation exposed the activities of a criminal organization whose members had been illegally appropriating real estate and other assets of legal entities for a long time. As clarified by NABU, the group was led by a current and a former Member of Parliament of Ukraine, and included high-ranking officials of the President's Office.

The scheme and scale of raiding

The investigation established that the large-scale raider scheme was implemented through the illegal seizure of enterprise assets. According to the case materials, the organization's members illegally seized assets worth more than 248 million UAH in the autumn of 2025. Additionally, in May 2026, the perpetrators attempted to gain control over real estate in Kyiv with a total value exceeding 207 million UAH. NABU separately emphasized that the goal of seizing one of the enterprises was to gain control over real estate in the center of Kyiv worth more than 500 million UAH.

Who is involved in the case

According to the investigation, current and former MPs, officials of the President's Office of Ukraine and the Ministry of Justice, as well as judges and hackers, could be implicated in the crimes. Later, it became known that the individuals involved were Deputy Head of the President's Office Iryna Mudra, MP Vadym Stolar, and former MP Maksym Mykytasa. On the same day, August 19, it was announced that Mudra was dismissed from her position as Deputy Head of the President's Office.

Financial trail and evidence

Investigators determined that at least $514,000 was allocated to implement the scheme. To execute their criminal plans, the perpetrators, according to the investigation, used coordinated actions within the group. NABU also published recordings of conversations where the suspects discussed transferring money for making necessary decisions and establishing control over enterprises. According to law enforcement officials, these materials confirm the coordinated actions of the organization's members.

Contradictory data

The provided materials contain an inconsistency in the names of the operations: the main part of the text and the announcement of the special operation on August 19 refer to Operation "Themis", whereas the final line mentions the previously published NABU and SAP operation "Forrest Gump". It is unclear whether this refers to the same operation under different names or two separate cases involving the same group of people. Furthermore, the sources cite different amounts — 248 million, 207 million, and more than 500 million UAH — which, judging by the text, relate to different episodes and objects, rather than being mutually exclusive figures for the same asset.

Investigation status

NABU and SAP emphasize that the pre-trial investigation is ongoing. This means that the published information reflects the version of the investigation, not the final conclusions of the court, and the guilt of specific individuals has not been established. Law enforcement officials leave the further development of the case, including the possible involvement of additional suspects among judges, Ministry of Justice officials, and hackers, outside the scope of the current statement.