Worldwide operation dismantles LeakBase discussion board used to commerce stolen information

• Worldwide regulation enforcement dismantles LeakBase discussion board used to commerce stolen credentials on-line.
• After a worldwide operation concentrating on cybercriminal customers, authorities seized the database and recognized the suspect.
• Since its launch in 2021, LeakBase has hosted 142,000 customers buying and selling compromised information and theft logs.

U.S. authorities and a number of other worldwide companions have shut down LeakBase, a web based discussion board extensively utilized by cybercriminals to commerce stolen information. The removals adopted a Europol-led operation carried out in a number of nations between March 3 and March 4.

Investigators focused the platform’s infrastructure and its most lively customers, disrupting {the marketplace} that has been working overtly on the web since 2021 and internet hosting mass credential leaks and compromised databases.

Regulation enforcement businesses performed arrests, searches, and investigative interventions through the operational section, with a give attention to figuring out people related to the platform. On March 4, authorities seized the discussion board’s area and changed it with a regulation enforcement discover, successfully eliminating entry to the service.

Giant archive of compromised information hosted by boards

LeakBase served as a market the place cybercriminals may purchase, promote, and commerce stolen info. This discussion board is devoted to compromised databases and “stealer logs,” that are collections of usernames, passwords, and different credentials harvested by means of infostealer malware.

Investigators mentioned the platform had an intensive archive of compromised information, together with previous breaches and newly acquired information units. This info was typically used for account takeovers, on-line fraud, and extra cyber intrusions.

The discussion board was operated in English and was accessible by way of the open internet. Its inner techniques used credit score and status scores to handle transactions between customers and construct belief inside the platform’s group.

By December 2025, LeakBase had over 142,000 registered customers. The platform’s data embrace roughly 32,000 posts and greater than 215,000 personal messages exchanged between individuals.

World enforcement actions concentrating on key customers

Authorities carried out roughly 100 enforcement actions around the globe through the investigation. The measures included arrests, raids, and “knock-and-talk” visits to suspects believed to be lively on the discussion board.

Regulation enforcement centered on 37 people who have been recognized as among the platform’s most lively customers. Investigators additionally seized the discussion board’s database, permitting authorities to determine a number of individuals who tried to stay nameless on-line.

Europol coordinates worldwide investigation

Europol supported this effort by analyzing the discussion board’s infrastructure and consumer exercise. Analysts in contrast information to ongoing investigations and recognized connections between suspects, victims, and digital proof throughout jurisdictions.

The operational information dash, held at Europol’s headquarters in The Hague, introduced collectively specialists to research the seized supplies and determine leads for the investigation. Knowledge scientists labored with researchers to arrange and extract tens of millions of knowledge factors from the platform.

Associated: Fraudsters exploit Australia’s ‘ReportCyber’ portal to impersonate police and steal cryptocurrencies