{"id":203178,"date":"2026-03-07T03:41:14","date_gmt":"2026-03-07T03:41:14","guid":{"rendered":"https:\/\/quixnet.net\/wpinstance\/office-of-public-affairs-united-states-leads-dismantlement-of-one-of-the-worlds-largest-hacker-forums-department-of-justice-gov\/"},"modified":"2026-03-07T03:41:14","modified_gmt":"2026-03-07T03:41:14","slug":"office-of-public-affairs-united-states-leads-dismantlement-of-one-of-the-worlds-largest-hacker-forums-department-of-justice-gov","status":"publish","type":"post","link":"https:\/\/quixnet.net\/wpinstance\/office-of-public-affairs-united-states-leads-dismantlement-of-one-of-the-worlds-largest-hacker-forums-department-of-justice-gov\/","title":{"rendered":"Office of Public Affairs | United States Leads Dismantlement of One of the World\u2019s Largest Hacker Forums – Department of Justice (.gov)"},"content":{"rendered":"

An official website of the United States government
Here’s how you know
Official websites use .gov<\/strong>
A .gov<\/strong> website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS<\/strong>
A lock<\/strong> ( Lock<\/title> Locked padlock<\/desc> <\/svg> <\/span> ) or https:\/\/<\/strong> means you\u2019ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Archived News<\/strong><\/a>
The Department of Justice announced today the seizure of the LeakBase database, one of the world\u2019s largest online forums for cybercriminals to buy and sell stolen data and cybercrime tools.
According to an affidavit unsealed on March 3, the LeakBase forum had over 142,000 members and more than 215,000 messages between members. Available on the open web and in English, the forum had an enormous and continuously updated archive of hacked databases including many from high profile attacks, including hundreds of millions of account credentials. LeakBase allowed forum users to sell the information from stolen databases, including data illegally obtained from U.S. corporations and individuals, and offered credit and debit card numbers, banking account and routing information, usernames and associated passwords which could facilitate additional account takeovers, as well as other sensitive business and personally identifiable information.
On March 3 and 4, law enforcement agents and officers in 14 countries including the United States took synchronized actions against LeakBase and its users in a coordinated effort hosted by Europol in The Hague. Specifically, the United States and other countries shut down LeakBase, seized its data and two of the domains used by the forum, posted seizure banners on the LeakBase sites, sent prevention messages to LeakBase members, and collected additional evidence. Law enforcement also executed search warrants, arrests, and conducted interviews in the United States, Australia, Belgium, Poland, Portugal, Romania, Spain, and the United Kingdom.  
\u201cThe takedown of this cyber forum disrupts a major international platform that cybercriminals use to obtain and profit from the theft of sensitive personal, banking and account credentials,\u201d said Assistant Attorney General A. Tysen Duva of the Justice Department\u2019s Criminal Division. \u201cThis operation illustrates the strength of the United States and our international partners working across the globe to dismantle a critical cybercriminal forum. The Criminal Division will continue to leverage our international relationships to protect victim personal and account information from falling into the hands of transnational criminal organizations.\u201d
\u201cThis 14-country operation demonstrates the extraordinary cooperation with our international partners,\u201d said U.S. Attorney Melissa Holyoak of the District of Utah. \u201cWorking with our partners, we can take down even the most sophisticated cyber criminals and networks. My office remains steadfast in our commitment to investigate and seek justice for Americans who are targeted by individuals attempting to hide behind foreign borders.\u201d
\u201cThe FBI, Europol, and law enforcement agencies from around the world executed a takedown of LeakBase, one of the largest online cybercriminal platforms, seizing users\u2019 accounts, posts, credit details, private messages, and IP logs for evidentiary purposes,\u201d said Assistant Director Brett Leatherman of the FBI\u2019s Cyber Division. \u201cTogether with our partners, we are sending a message that no criminal is truly anonymous online and removing an easy point of access to stolen information on American businesses and individuals. The FBI will continue to defend the homeland by dismantling the key services that cybercriminals use to facilitate their attacks.\u201d
\u201cHiding behind a screen does not shield cybercriminals from accountability,\u201d said Special Agent in Charge Robert Bohls of the FBI Salt Lake City Field Office. \u201cThis international operation demonstrates the strength of our global alliances and our shared commitment to disrupting platforms that facilitate the theft of data and the victimization of innocent people and organizations worldwide. Together, we will continue to identify, dismantle, and hold accountable those who seek to profit from cybercrime, no matter where they operate.\u201d
The announcement today follows the disruption of predecessor cybercrime marketplaces RaidForums in 2022<\/a> and BreachForums in 2023<\/a>, in addition to the conviction and subsequent sentencing of the founder of BreachForums in 2025<\/a>.
The FBI Salt Lake City Field Office is investigating the case. The FBI San Diego Field Office, Utah Department of Public Safety, and Provo Police Department also participated in the operation domestically.
Senior Counsel Matthew A. Lamberti of the Criminal Division\u2019s Computer Crime and Intellectual Property Section and Assistant U.S. Attorneys Brent L. Andrus and Carl D. LeSueur for the District of Utah are prosecuting the case. The Justice Department\u2019s Office of International Affairs, Europol, and numerous law enforcement authorities in Australia, Belgium, Canada, Germany, Greece, Kosovo, Malaysia, Netherlands, Poland, Portugal, Romania, Spain, and the United Kingdom provided significant assistance.
CCIPS investigates and prosecutes cybercrime and intellectual property (IP) crime in coordination with domestic and international law enforcement agencies, often with assistance from the private sector. Since 2020, CCIPS has secured the conviction of over 180 cybercriminals and IP criminals, and court orders for the return of over $350 million in victim funds.
Anyone that has any information regarding LeakBase should contact the FBI at FBI-SU-Leakbase@fbi.gov<\/a>.
Yesterday, a Romanian national pleaded guilty in connection with an online intrusion into an Oregon state government office in 2021 and other cyber attacks on U.S. victims.
The U.S. government executed seizure warrants against three U.S.-registered internet domains of commercial websites allegedly engaged in the illegal distribution of copyrighted works.
Yesterday a federal district court in the Southern District of Florida accepted the guilty pleas of two men to conspiring to obstruct, delay or affect commerce through extortion in connection…
Office of Public Affairs<\/strong>
U.S. Department of Justice
950 Pennsylvania Avenue, NW
Washington DC 20530
Office of Public Affairs Direct Line
202-514-2007
Department of Justice Main Switchboard
202-514-2000
Signup for Email Updates<\/a>
Social Media<\/a>
\"U.S.
Have a question about Government Services?<\/strong><\/p>\n

source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

An official website of the United States governmentHere’s how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock ( Lock Locked padlock ) or https:\/\/ means you\u2019ve safely connected to the .gov website. Share sensitive information only on […]<\/p>\n","protected":false},"author":1,"featured_media":203179,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[10],"tags":[],"class_list":{"0":"post-203178","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-world","8":"entry"},"_links":{"self":[{"href":"https:\/\/quixnet.net\/wpinstance\/wp-json\/wp\/v2\/posts\/203178","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/quixnet.net\/wpinstance\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/quixnet.net\/wpinstance\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/quixnet.net\/wpinstance\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/quixnet.net\/wpinstance\/wp-json\/wp\/v2\/comments?post=203178"}],"version-history":[{"count":0,"href":"https:\/\/quixnet.net\/wpinstance\/wp-json\/wp\/v2\/posts\/203178\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/quixnet.net\/wpinstance\/wp-json\/wp\/v2\/media\/203179"}],"wp:attachment":[{"href":"https:\/\/quixnet.net\/wpinstance\/wp-json\/wp\/v2\/media?parent=203178"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/quixnet.net\/wpinstance\/wp-json\/wp\/v2\/categories?post=203178"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/quixnet.net\/wpinstance\/wp-json\/wp\/v2\/tags?post=203178"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}