The notorious BreachForums platform, a well-known marketplace for stolen data and cybercriminal tools, has been seized by federal authorities. On Wednesday, the website displayed a takedown banner featuring the insignias of the FBI, DOJ, and international partners, including the U.K.’s National Crime Agency, and agencies from Australia, New Zealand, and Switzerland. The takedown also extended to the BreachForums Telegram page, marking a significant victory in the fight against cybercrime.
The FBI and DOJ have created a website for individuals to report information regarding cybercriminal activities on BreachForums. According to the FBI, BreachForums, under the management of a threat actor known as ShinyHunters since June 2023, was a marketplace for illicit services, including the sale of stolen access devices and hacking tools. The platform’s previous administrator was arrested last year, prompting another cybercriminal, “Baphomet,” to resurrect the forum.
Why it matters: The seizure of BreachForums and its associated Telegram channel represents a critical step in curbing cybercrime activities that jeopardize the security and privacy of millions of individuals worldwide. By dismantling this platform, authorities aim to disrupt the operations of cybercriminals and prevent further exploitation of stolen data. The FBI and DOJ continue to urge victims and others with knowledge of the platform’s activities to come forward, highlighting the ongoing efforts to mitigate the impact of cybercrime and protect sensitive personal information.
- Takedown Operation: On Wednesday, federal and international law enforcement agencies seized the BreachForums website and Telegram channel, displaying a takedown notice with the insignias of the FBI, DOJ, and international partners.
- Reporting and Evidence Gathering: The FBI and DOJ have set up a dedicated website for individuals to report information related to BreachForums’ activities, emphasizing the importance of community involvement in combating cybercrime.
- Leadership and Operations: BreachForums has been operated by ShinyHunters since June 2023, serving as a marketplace for illegal services such as selling stolen access devices, means of identification, and hacking tools.
- Historical Context: This is the second takedown of BreachForums; the first occurred last year, leading to the arrest and conviction of its previous administrator. The platform was quickly resurrected by a new operator, Baphomet, who pledged to continue its operations.
Go Deeper -> Feds seize BreachForums platform, Telegram page – The Record