This is in the BBC News.
"[...] The court heard that Kurtaj had been violent while in custody with dozens of reports of injury or property damage.
Doctors deemed Kurtaj unfit to stand trial due to his severe autism so the jury was asked to determine whether or not he committed the alleged acts - not if he did so with criminal intent.
A mental health assessment used as part of the sentencing hearing said he "continued to express the intent to return to cyber-crime as soon as possible. He is highly motivated."
The jury was told that while he was on bail for hacking Nvidia and BT/EE and in police protection at a Travelodge hotel, he continued hacking and carried out his most infamous hack. [...]"
A second member in the UK was also sentenced in the same trial. But got a different sentence, because he was not compeletly insane like the other one (the 18 year old one).
"[...]Another Lapsus$ member, who is 17 and cannot be named because of his age, was found guilty in the same trial, which lasted six weeks at Southwark Crown Court.
He worked with Kurtaj and other members of Lapsus$ to hack tech giant Nvidia and phone company BT/EE and steal data before demanding a four million dollar ransom, which was not paid.
They also stole directly from individuals through their cryptocurrency wallets.
The 17-year-old was sentenced to an 18 month long Youth Rehabilitation Order, including intense supervision and a ban on using VPNs online.
As well as hacking offences the boy was sentenced for what the judge described as "unpleasant and frightening pattern of stalking and harassment" of two young women.
Kurtaj and the 17-year-old are the first members of the Lapsus$ group to be convicted but it is thought others are still at large. [...]"
Source: https://www.bbc.com/news/techn...
I can't find the full report on their crimes. That part might be under a protected order by the UK courts for some reason. I guess, because they haven't found rest of this internet criminals.