TL;DR
Gavin Webb of the National Crime Agency received an OBE in the 2026 New Year Honours for his strategic role in Operation Cronos, the international effort that disrupted the LockBit ransomware operation. The NCA credited the coordinated effort with undermining a group that accounted for a large share of ransomware harm in 2023–24.
What happened
The 2026 New Year Honours included an Officer of the Order of the British Empire (OBE) for Gavin Webb, a senior National Crime Agency (NCA) officer who ran the strategic coordination for Operation Cronos. The NCA says Cronos was a multinational law enforcement campaign, led by the UK within an NCA-driven effort, that disrupted the LockBit ransomware network. Webb, 51, is the NCA's regional head for multi-threat and border investigations; although not a cyber specialist and not directly operating any of the technical intrusions, he managed the behind-the-scenes planning and sequencing that the agency says made the operation possible. LockBit had emerged as a dominant ransomware-as-a-service platform in 2023–24 and was blamed by the NCA for roughly a quarter of ransomware incidents and billions in damage to thousands of victims. Several other NCA officials were also recognised on the honours list for contributions to serious and economic crime work.
Why it matters
- Recognises leadership and coordination as decisive elements in large, international cyber operations.
- Highlights how non-technical managers can shape outcomes in complex law enforcement cyber actions.
- Signals UK authorities prioritising disruption of dominant ransomware networks that caused extensive harm in 2023–24.
- Adds public visibility and official recognition to cross-border policing efforts against organised cybercrime.
Key facts
- Gavin Webb received an OBE in the King’s 2026 New Year Honours for his role in Operation Cronos.
- Webb served in a strategic coordinating capacity for the NCA-led international operation targeting LockBit.
- The NCA described Webb as a police officer by trade who did not carry out hands-on technical work during Cronos.
- LockBit was characterised by the NCA as responsible for around one quarter of ransomware attacks during 2023–24.
- The NCA said LockBit caused billions of dollars in damage and affected thousands of victims in that period.
- Webb is the NCA’s regional head of multi-threat and border investigations and usually focuses on firearms, drugs, and organised immigration crime.
- Seven other NCA officers were also named in the honours list; Kay Taylor received a CBE and Fiona Nicolson an MBE.
- Five additional NCA staff were awarded MBEs but their names were withheld because of the nature of their work.
What to watch next
- Further public details on prosecutions, arrests or asset seizures resulting from Operation Cronos — not confirmed in the source.
- Any official statements on changes to international cyber-cooperation prompted by lessons from Cronos — not confirmed in the source.
- Developments in LockBit-related activity or new variants following the disruption — not confirmed in the source.
Quick glossary
- OBE (Officer of the Order of the British Empire): A UK honour recognising notable contributions to public life or service; ranks below knighthood/damehood.
- National Crime Agency (NCA): The UK law enforcement agency that leads national and international operations against serious and organised crime.
- Ransomware-as-a-Service (RaaS): A business model where developers provide ransomware tools and infrastructure to affiliates who carry out attacks.
- Operation Cronos: The NCA-led international law enforcement operation described in the source as aimed at disrupting the LockBit ransomware network.
Reader FAQ
Who is Gavin Webb?
A 51-year-old senior NCA officer who serves as regional head of multi-threat and border investigations; he received an OBE for his role in Operation Cronos.
Did Webb perform the technical intrusion against LockBit?
No. The source says Webb was not a hands-on cyber operator; he provided strategic coordination and orchestration.
Was LockBit completely dismantled by Cronos?
The source states Cronos disrupted LockBit but does not claim the group was completely dismantled.
Were other NCA staff recognised in the honours list?
Yes. Kay Taylor received a CBE, Fiona Nicolson an MBE, five other officers got MBEs whose names were withheld, and additional NCA personnel were honoured.
CYBER-CRIME LockBit takedown architect gets New Year award from King Charles Gavin Webb orchestrated Operation Cronos as it pulled off the legendary disruption sting Connor Jones Fri 2 Jan 2026 // 12:26 UTC A…
Sources
- LockBit takedown architect gets New Year award from King Charles
- King Charles gives award to LockBit takedown architect
- UK unmasks LockBit ransomware affiliate as high-ranking …
- The Evil Corp cyber gangster who worked for LockBit
Related posts
- How Protesters Became Content for the Cops: The Spectacle of Protest Policing
- SpaceX to Lower Thousands of Starlink Satellites to Reduce Collision Risk
- Public Domain Day 2026: 20 Notable 1930 Books Enter the U.S. Public Domain