: It is a primary destination for advertising and selling "breached" data, including credentials, credit card details, and personal documents.
To combat the threats posed by platforms like BreachForums, it is crucial to:
| Date | Event | |------|-------| | March 2022 | RaidForums seized by DOJ/Europol. | | March–April 2022 | BreachForums created by “pompompurin” (aka “Pompompurin”). | | Mid-2022 | Grows quickly by hosting high-profile leaks (e.g., Robinhood, Twilio, Nvidia). | | March 2023 | Pompompurin arrested in New York. | | May 2023 | FBI seizes BreachForums domains; displays seizure banner. | | June 2023 | Pompompurin pleads guilty to conspiracy to commit access device fraud. | | Post-2023 | Multiple reboots (BreachForums 2.0 / 3.0) appear; none have original infrastructure. |
BreachForums was no stranger to controversy. The platform was repeatedly criticized for facilitating cybercrime and contributing to the proliferation of stolen data. Many experts argued that the site enabled malicious actors to launch targeted attacks, leading to significant financial and reputational losses for individuals and organizations.
Shortly after the seizure, the forum's owner, (pompompurin), was arrested in New York. He was charged with conspiracy to commit access device fraud and possession of child pornography (stemming from content posted by users). In early 2024, Fitzpatrick pleaded guilty and faced significant prison time, marking a major victory for federal prosecutors. BreachForums
The dark web has long been a hub for illicit activities, with numerous marketplaces and forums emerging and disappearing over the years. One such platform that gained significant attention in recent times is BreachForums, a notorious online market that specialized in buying and selling stolen data, hacking tools, and other cybercrime-related services. In this article, we will delve into the world of BreachForums, exploring its history, features, and eventual downfall.
: U.S. authorities and international partners have seized BreachForums' domains and servers multiple times, including major operations in 2023, 2024, and late 2025 Infrastructure Shifts
The seizure of BreachForums was likely a result of a combination of factors:
BreachForums was a one-stop shop for a wide range of cybercrime-related products and services, including: : It is a primary destination for advertising
In January 2023, BreachForums became the sales floor for data stolen from DC Health Link, a health insurance exchange serving U.S. politicians, congressional staff, and their families. The breach exposed the Social Security numbers, health plan information, and enrollee details of tens of thousands of individuals. This breach served as the final straw, directly motivating the FBI to accelerate their investigation into Fitzpatrick and ultimately arrest him less than two months later.
The platform's administrators took measures to maintain anonymity and evade law enforcement. They employed robust encryption, utilized cryptocurrency for transactions, and required users to register with a valid email address or username. However, this did not prevent authorities from tracking down users and eventually shutting down the platform.
However, the lenient sentence did not last. While out on supervised release awaiting his fate, Fitzpatrick violated the terms of his bail by using a VPN to access online chatrooms. In those forums, he allegedly made statements challenging the legitimacy of his guilty plea and trivializing the sale of sensitive data to foreign interests. An appellate court found that the original sentence had failed to address the seriousness of his crimes and vacated it. In September 2025, Fitzpatrick was re-sentenced to . In delivering the new sentence, a federal prosecutor described the harm as nearly incalculable, specifically calling out the human cost of the child sexual abuse material he possessed.
BreachForums quickly became a significant player in the dark web ecosystem, attracting a large user base and generating substantial revenue. The platform's popularity can be attributed to its: | | Mid-2022 | Grows quickly by hosting
The golden age of BreachForums was short-lived. On , the FBI and international partners seized the domain. Visitors to the site were greeted with a seizure banner and a message stating that the site had been taken down as part of an international law enforcement operation.
The operators will change. The domains will shift. But the data—once on BreachForums—is forever.
The hammer finally fell on March 15, 2023. FBI agents arrested Conor Brian Fitzpatrick at his parents' home in Peekskill, New York. The charges were severe: conspiracy to commit access device fraud, solicitation concerning fraudulent access devices, and possession of child sexual abuse material. In parallel with the arrest, a coordinated disruption operation caused the original BreachForums website to go offline.
: It gained notoriety for hosting data from massive breaches, including companies like (70 million users) and alleged leaks from Ticketmaster (560 million users). Stolen Datasets : As of mid-2025, the forum offered access to over 14 billion individual records