A Russian hacker convicted of the $9 million hack of RBS WorldPay has avoided jail and has been given only a suspended sentence.

Yevgeny Anikin, 27, received a suspended sentence of five years on Monday, according to Russian state news agency RIA Novosti, after pleading guilty to what the U.S. has called “perhaps the most sophisticated and organized computer fraud attack ever conducted.”

Anikin reportedly expressed remorse for his role in the caper, telling the court this week, “I want to say that I repent and fully admit my guilt.” He had been under house arrest since 2009 and reportedly bou...