U.S. authorities, in cooperation with international partners, have dismantled LeakBase, a major online forum used for the exchange of stolen data and cybercrime tools. The Department of Justice announced that the database, which had over 142,000 members and more than 215,000 messages, was seized following coordinated law enforcement actions in 14 countries.
LeakBase operated on the open web in English and provided access to an extensive archive of hacked databases from high-profile attacks. Users could buy and sell stolen information such as credit card numbers, banking details, usernames and passwords, as well as other sensitive business and personal data.
On March 3 and 4, law enforcement agencies from the United States and other countries took synchronized steps against LeakBase. Actions included shutting down the forum’s domains, seizing its data, posting seizure notices on its websites, sending warnings to users, collecting evidence, executing search warrants and arrests, and conducting interviews in several countries including Australia, Belgium, Poland, Portugal, Romania, Spain and the United Kingdom.
Assistant Attorney General A. Tysen Duva of the Justice Department’s Criminal Division said: “The takedown of this cyber forum disrupts a major international platform that cybercriminals use to obtain and profit from the theft of sensitive personal, banking and account credentials. This operation illustrates the strength of the United States and our international partners working across the globe to dismantle a critical cybercriminal forum. The Criminal Division will continue to leverage our international relationships to protect victim personal and account information from falling into the hands of transnational criminal organizations.”
U.S. Attorney Melissa Holyoak for the District of Utah stated: “This 14-country operation demonstrates the extraordinary cooperation with our international partners. Working with our partners we can take down even the most sophisticated cyber criminals and networks. My office remains steadfast in our commitment to investigate and seek justice for Americans who are targeted by individuals attempting to hide behind foreign borders.”
Assistant Director Brett Leatherman of the FBI’s Cyber Division added: “The FBI, Europol, and law enforcement agencies from around the world executed a takedown of LeakBase one of the largest online cybercriminal platforms seizing users’ accounts posts credit details private messages and IP logs for evidentiary purposes. Together with our partners we are sending a message that no criminal is truly anonymous online and removing an easy point of access to stolen information on American businesses and individuals. The FBI will continue to defend the homeland by dismantling key services that cybercriminals use to facilitate their attacks.”
Special Agent in Charge Robert Bohls of FBI Salt Lake City Field Office commented: “Hiding behind a screen does not shield cybercriminals from accountability. This international operation demonstrates strength of our global alliances and shared commitment to disrupting platforms that facilitate theft of data…Together we will continue to identify dismantle hold accountable those who seek profit from cybercrime no matter where they operate.”
This action follows earlier disruptions involving RaidForums in 2022 as well as BreachForums in 2023; authorities also convicted BreachForums’ founder in 2025.
The case is being investigated by FBI Salt Lake City Field Office with support from San Diego Field Office Utah Department of Public Safety Provo Police Department domestically; Senior Counsel Matthew A Lamberti (Criminal Division’s Computer Crime & Intellectual Property Section) along with Assistant U.S Attorneys Brent L Andrus Carl D LeSueur (District Utah) are prosecuting it.
International assistance came from Europol plus law enforcement bodies across Australia Belgium Canada Germany Greece Kosovo Malaysia Netherlands Poland Portugal Romania Spain UK.
CCIPS has prosecuted more than 180 cybercrime cases since 2020 securing court orders returning over $350 million stolen funds.
Anyone with information about LeakBase is asked to contact FBI at FBI-SU-Leakbase@fbi.gov.
