The FBI has taken down the notorious BreachForums hacking forum, which facilitated the leak and sale of stolen corporate data to cybercriminals. The seizure of the website occurred shortly after it was used to leak data stolen from a Europol law enforcement portal last week. The message displayed on the website now indicates that the FBI, with assistance from international partners, has taken control of both the site’s servers and domains.
The seizure message on the site urges individuals to report any cyber criminal activity on BreachForums to the FBI. It also features images of the site’s administrators, Baphomet and ShinyHunters, with prison bars overlaying them. This action suggests that law enforcement now has access to crucial information such as email addresses, IP addresses, and private messages, which could aid in ongoing investigations.
In addition to seizing the website, the FBI has also taken control of the site’s Telegram channel, along with other channels owned by Baphomet. Messages sent by law enforcement through these channels indicate that they are now under their control. It is believed that Baphomet was arrested during the operation, as messages from his account were posted by law enforcement on the seized Telegram channels.
The FBI is now calling on victims and individuals with information about BreachForums and its members to come forward and assist in their investigation. A dedicated page on the FBI’s Internet Crime Complaint Center (IC3) portal has been set up for this purpose, allowing users to report any relevant information.
The history of BreachForums traces back to RaidForums, a site established in 2015 for trading stolen data and illegal cyber services. After RaidForums was seized by law enforcement, Breached was created by one of its members as a replacement. However, this site met a similar fate after a data breach affecting D.C. Health Link was linked back to the platform. Breached was seized, and its admin, Conor Fitzpatrick, was arrested.
Subsequently, Baphomet and ShinyHunters launched BreachForums, which quickly gained popularity among cybercriminals for sharing newly stolen corporate data. The site became a hub for leaked data from high-profile breaches at companies like AT&T, 23andMe, Hewlett Packard Enterprise, and others. The recent leak of data stolen from Europol’s Platform for Experts (EPE) portal by IntelBroker sparked law enforcement’s intervention, ultimately leading to the seizure of BreachForums.
The FBI’s seizure of BreachForums signifies a significant blow to the underground cybercrime community. By dismantling this platform, law enforcement has disrupted the illicit activities of threat actors and may have gathered valuable intelligence for future investigations. The collaborative effort between the FBI and international partners demonstrates a united front against cybercrime, sending a strong message to those engaging in illegal online activities.