{"id":4746,"date":"2026-03-07T04:40:17","date_gmt":"2026-03-07T04:40:17","guid":{"rendered":"http:\/\/ft365.org\/index.php\/2026\/03\/07\/europol-operation-seizes-leakbase-data-breach-site\/"},"modified":"2026-03-07T04:40:17","modified_gmt":"2026-03-07T04:40:17","slug":"europol-operation-seizes-leakbase-data-breach-site","status":"publish","type":"post","link":"https:\/\/ft365.org\/index.php\/2026\/03\/07\/europol-operation-seizes-leakbase-data-breach-site\/","title":{"rendered":"Europol Operation Seizes LeakBase Data Breach Site"},"content":{"rendered":"
\n

\"Photo<\/p>\n<\/div>\n

\n

One of the world\u2019s largest online forums for stolen data has been taken down following a global law enforcement operation coordinated by Europol.<\/p>\n

LeakBase was an English-language site operating on the surface web which facilitated an illegal trade in stolen data, including stealer logs –\u00a0archives of stolen credentials harvested through infostealer malware.<\/p>\n

By December 2025, it had more than 142,000 registered users, with around 32,000 posts and over 215,000 private messages sent by those users, Europol revealed.<\/p>\n

Coordinated action on March 3 led to arrests, house searches and \u201cknock-and-talk\u201d interviews by police in the US, Australia, Belgium, Poland, Portugal, Romania, Spain, and the UK.<\/p>\n

Europol claimed 37 of the most active users of the platforms were targeted by police, as well as dozens more.<\/p>\n

A day later, the authorities moved to seize two LeakBase domains and replace the homepage with a law enforcement notice promoting \u201cOperation Leak.\u201d<\/p>\n

Read more on leak sites:<\/em> FBI and French Police Shutter BreachForums Domain Again.<\/em><\/p>\n

As part of the operation, law enforcers seized the forum\u2019s customer database. Europol has vowed to continue tracing and unmasking offenders that used the site.<\/p>\n

\u201cThis operation shows that no corner of the internet is beyond the reach of international law enforcement. What began as a shadowy forum for stolen data has now been dismantled, and those who believed they could hide behind anonymity are being identified and held accountable,\u201d said Edvardas \u0160ileris, head of Europol\u2019s European Cybercrime Centre.<\/p>\n

\u201cThis is a clear message to cyber criminals everywhere: if you traffic in other people\u2019s stolen information, law enforcement will find you and bring you to justice.\u201d<\/p>\n

The Latest in a Long Line of Takedowns<\/strong><\/h2>\n

Operation Leak is the latest attempt to disrupt a flourishing trade in stolen data, driven by infostealer activity. A report from last year claimed that 1.8 billion credentials were stolen in the first half of 2025, an 800% increase compared to\u00a0the previous six months.<\/p>\n

Predecessors of LeakBase taken out by law enforcement included RaidForums in 2022, and BreachForums a year later.<\/p>\n

However, the FBI and French police were forced to take action again in 2025 to shutter another BreachForums domain \u2013 highlighting the \u201cwhack-a-mole\u201d game being played by site administrators and law enforcement.<\/p>\n

In related news, a global operation led by Microsoft and Europol recently resulted in disruption to the notorious Tycoon2FA phishing-as-a-service site.<\/p>\n

Tycoon2FA enabled threat actors using it to\u00a0bypass multi-factor authentication\u00a0(MFA). It was responsible for tens of millions of phishing messages reaching over 500,000 organizations each month worldwide.\u00a0<\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"

One of the world\u2019s largest online forums for stolen data has been taken down following a global law enforcement operation coordinated by Europol. LeakBase was an English-language site operating on the surface web which facilitated an illegal trade in stolen data, including stealer logs –\u00a0archives of stolen credentials harvested through infostealer malware. By December 2025<\/p>\n","protected":false},"author":2,"featured_media":4747,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-4746","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"featured_image_urls":{"full":["https:\/\/ft365.org\/wp-content\/uploads\/2026\/03\/4746-8b8b7335-fdb2-49fd-a9c5-1b4b6d856907.jpg",300,300,false],"thumbnail":["https:\/\/ft365.org\/wp-content\/uploads\/2026\/03\/4746-8b8b7335-fdb2-49fd-a9c5-1b4b6d856907-150x150.jpg",150,150,true],"medium":["https:\/\/ft365.org\/wp-content\/uploads\/2026\/03\/4746-8b8b7335-fdb2-49fd-a9c5-1b4b6d856907.jpg",300,300,false],"medium_large":["https:\/\/ft365.org\/wp-content\/uploads\/2026\/03\/4746-8b8b7335-fdb2-49fd-a9c5-1b4b6d856907.jpg",300,300,false],"large":["https:\/\/ft365.org\/wp-content\/uploads\/2026\/03\/4746-8b8b7335-fdb2-49fd-a9c5-1b4b6d856907.jpg",300,300,false],"1536x1536":["https:\/\/ft365.org\/wp-content\/uploads\/2026\/03\/4746-8b8b7335-fdb2-49fd-a9c5-1b4b6d856907.jpg",300,300,false],"2048x2048":["https:\/\/ft365.org\/wp-content\/uploads\/2026\/03\/4746-8b8b7335-fdb2-49fd-a9c5-1b4b6d856907.jpg",300,300,false],"morenews-featured":["https:\/\/ft365.org\/wp-content\/uploads\/2026\/03\/4746-8b8b7335-fdb2-49fd-a9c5-1b4b6d856907.jpg",300,300,false],"morenews-large":["https:\/\/ft365.org\/wp-content\/uploads\/2026\/03\/4746-8b8b7335-fdb2-49fd-a9c5-1b4b6d856907.jpg",300,300,false],"morenews-medium":["https:\/\/ft365.org\/wp-content\/uploads\/2026\/03\/4746-8b8b7335-fdb2-49fd-a9c5-1b4b6d856907.jpg",300,300,false],"crawlomatic_preview_image":["https:\/\/ft365.org\/wp-content\/uploads\/2026\/03\/4746-8b8b7335-fdb2-49fd-a9c5-1b4b6d856907-146x146.jpg",146,146,true]},"author_info":{"display_name":"henry","author_link":"https:\/\/ft365.org\/index.php\/author\/henry\/"},"category_info":"Uncategorized<\/a>","tag_info":"Uncategorized","comment_count":"0","_links":{"self":[{"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/posts\/4746","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/comments?post=4746"}],"version-history":[{"count":0,"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/posts\/4746\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/media\/4747"}],"wp:attachment":[{"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/media?parent=4746"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/categories?post=4746"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/tags?post=4746"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}