The U.S. Department of Justice announced the seizure of LeakBase, an online forum authorities say was used by cybercriminals to buy and sell stolen data and cybercrime tools. According to the Justice Department, the platform functioned as a large repository of compromised databases and sensitive information obtained through cyberattacks. Investigators said the forum was accessible on the open web and operated in English, making it widely accessible to users around the world. Federal officials say the takedown is part of a broader international effort aimed at dismantling platforms that facilitate cybercrime and the trafficking of stolen data.

According to an affidavit unsealed on March 3, investigators determined the forum had more than 142,000 members and contained over 215,000 messages exchanged between users. Authorities said the forum maintained “an enormous and continuously updated archive of hacked databases including many from high profile attacks.” Investigators said those archives contained hundreds of millions of account credentials linked to prior data breaches. Officials said the forum allowed users to access and exchange stolen data tied to individuals and companies across multiple countries.

Stolen Data Included Financial and Personal Information

Authorities said LeakBase allowed forum users to sell information obtained from stolen databases, including data illegally obtained from U.S. corporations and individuals. According to the Justice Department, the forum offered “credit and debit card numbers, banking account and routing information, usernames and associated passwords which could facilitate additional account takeovers.” Officials said the data also included sensitive business information and other personally identifiable information belonging to victims. Investigators said the availability of this information could enable identity theft, financial fraud, and unauthorized access to online accounts.

Federal authorities said platforms such as LeakBase can provide cybercriminals with a centralized location to obtain stolen data and tools used in cyberattacks. Investigators say that by removing the forum, law enforcement agencies aim to disrupt the distribution of compromised information used to target businesses and individuals. Authorities also seized the forum’s data, which could assist investigators in identifying users involved in cybercrime activity. Officials said the evidence collected from the site may support additional investigations and prosecutions.

Coordinated Actions Across 14 Countries

On March 3 and 4, law enforcement agencies in 14 countries, including the United States, carried out synchronized enforcement actions targeting LeakBase and individuals associated with the forum. The coordinated operation was hosted by Europol in The Hague and involved multiple international law enforcement agencies. Authorities shut down the forum, seized its data, and took control of two domains used to operate the platform. Officials also replaced the website with seizure banners and sent prevention messages to forum members notifying them that the site had been seized.

Authorities said law enforcement agencies also executed search warrants, made arrests, and conducted interviews during the operation. These actions took place in several countries, including the United States, Australia, Belgium, Poland, Portugal, Romania, Spain, and the United Kingdom. Investigators said the coordinated effort allowed authorities to collect digital evidence and identify individuals connected to the platform. Officials also seized user accounts, posts, credit transaction details, private messages, and IP address logs for evidentiary purposes.

Federal Officials Emphasize International Cooperation

Assistant Attorney General A. Tysen Duva of the Justice Department’s Criminal Division said the operation disrupted a major platform used by cybercriminals to profit from stolen information. “The takedown of this cyber forum disrupts a major international platform that cybercriminals use to obtain and profit from the theft of sensitive personal, banking and account credentials,” Duva said. He added that the operation demonstrates the strength of cooperation between the United States and its international partners in dismantling cybercrime networks. Duva said the Justice Department will continue to work with global partners to protect sensitive information from transnational criminal organizations.

U.S. Attorney Melissa Holyoak for the District of Utah said the case highlights the importance of international partnerships in combating cybercrime. “Working with our partners, we can take down even the most sophisticated cyber criminals and networks,” Holyoak said. She said her office remains committed to investigating individuals who attempt to hide behind foreign borders while targeting American victims. Officials said the coordinated effort allowed law enforcement agencies to take action against individuals connected to the forum across multiple jurisdictions.

Investigation Led by FBI Cyber Division

Assistant Director Brett Leatherman of the FBI’s Cyber Division said investigators seized significant amounts of digital evidence from the forum. “Together with our partners, we are sending a message that no criminal is truly anonymous online and removing an easy point of access to stolen information on American businesses and individuals,” Leatherman said. Authorities said investigators obtained user accounts, posts, credit details, private messages, and IP logs associated with the platform. Officials said the information could assist investigators in identifying individuals who used the forum to distribute or purchase stolen data.

Special Agent in Charge Robert Bohls of the FBI’s Salt Lake City Field Office said the operation demonstrates the strength of international law enforcement partnerships. Bohls said cybercriminals cannot rely on anonymity to avoid detection and accountability. “This international operation demonstrates the strength of our global alliances and our shared commitment to disrupting platforms that facilitate the theft of data,” Bohls said. Officials said investigators will continue working with international partners to identify individuals connected to cybercrime operations.

Operation Follows Earlier Cybercrime Forum Takedowns

The announcement follows earlier international actions targeting similar cybercrime marketplaces. Authorities previously disrupted the online platforms RaidForums in 2022 and BreachForums in 2023. Federal officials also secured the conviction and sentencing of the founder of BreachForums in 2025. Investigators said these enforcement actions are part of an ongoing effort to dismantle networks that facilitate the distribution of stolen data and cybercrime tools.

The FBI’s Salt Lake City Field Office is investigating the LeakBase case. Additional domestic partners involved in the operation include the FBI’s San Diego Field Office, the Utah Department of Public Safety, and the Provo Police Department. Prosecutors from the Justice Department’s Computer Crime and Intellectual Property Section and the U.S. Attorney’s Office for the District of Utah are handling the case. Authorities say numerous international law enforcement agencies also assisted with the investigation.

---

---

Disclaimer

The content provided in this publication is for educational and informational purposes only. The Hawk’s Eye – Consulting & News strives to deliver accurate and impactful stories. However, readers are advised to seek professional legal counsel and guidance for their specific legal inquiries and concerns. The publication does not assume any responsibility for actions taken by individuals based on the information presented. 

Additionally, while every effort is made to ensure the reliability of the information, the publication does not warrant the completeness, accuracy, or timeliness of the content. Readers are encouraged to verify any legal information with official sources and to use their discretion when interpreting and applying the information provided.

A Couple of Our Other Reads

You may be interested in our publishing about a Texas judge filing a lawsuit over same-sex wedding refusals.

Or you may find our publishing on a TABC agent receiving a stipend for a degree he didn’t hold, of interest. 

Follow Us on Social Media

If you are interested in staying updated on matters about your government in Texas and other important stories, trust The Hawk’s Eye – Consulting & News to provide reliable information that matters to you. You can follow us on social media platforms such as Facebook, Instagram, X, Reddit, YouTube, Tumblr, and LinkedIn to stay connected and informed.

FACEBOOK: TheHawksEyeNews
INSTAGRAM: Hawk_s_Eye_C_and_N
X: TheHawksEyeNews
REDDIT: TheHawksEyeCN
YOUTUBE: The Hawk’s Eye – Consulting & News
TUMBLR: The Hawk’s Eye – Consulting & News
LINKEDIN: The Hawk’s Eye – Consulting & News

---