Global Operation Shuts Down Major Cybercrime Forum LeakBase

Authorities in the United States and across Europe have dismantled LeakBase, one of the world’s largest online forums used by cybercriminals to trade stolen data, account credentials and hacking tools. The takedown followed a coordinated operation involving law enforcement agencies from 14 countries and represents another significant disruption of the global cybercrime ecosystem.

According to the Department of Justice (DoJ), LeakBase operated as a major hub for cybercriminal activity, hosting more than 142000 members and over 215000 messages. The platform provided access to a vast archive of hacked databases, many linked to high profile cyberattacks. Users were able to buy and sell sensitive data including credit and debit card numbers, bank account details, routing information and login credentials that could be used to facilitate further account takeovers and fraud.

Law enforcement actions on 3 and 4 March 2026 targeted the infrastructure supporting the forum. Authorities seized the LeakBase database and two domains associated with the platform, while placing seizure banners on the websites. Investigators also collected additional digital evidence and issued prevention messages to forum members warning them of the risks and legal consequences of participating in cybercrime marketplaces.

The operation was coordinated by Europol at its headquarters in The Hague and involved authorities from the United States, the United Kingdom, Australia, Belgium, Poland, Portugal, Romania and Spain, among others. Investigators executed search warrants, conducted interviews and made arrests across multiple jurisdictions as part of the joint enforcement action.

Officials said the disruption demonstrates the growing capability of international partnerships to dismantle transnational cybercrime infrastructure. The DoJ’s Criminal Division highlighted the role of coordinated global investigations in targeting platforms that facilitate large scale theft of personal and financial data.

The takedown also follows previous actions against major cybercrime forums, including RaidForums in 2022 and BreachForums in 2023. In 2025, the founder of BreachForums was convicted and sentenced, underscoring continued law enforcement pressure on administrators and users of such platforms.

The investigation is being led by the Federal Bureau of Investigation (FBI), with the Salt Lake City Field Office taking a central role. The FBI’s Cyber Division worked alongside domestic partners including the Utah Department of Public Safety and the Provo Police Department, as well as numerous international agencies.

Prosecutors from the DoJ’s Computer Crime and Intellectual Property Section (CCIPS) and the US Attorney’s Office for the District of Utah are handling the case. Authorities said the operation reflects an ongoing effort to dismantle cybercrime marketplaces and prevent the large scale exploitation of stolen personal and financial information.

Read the press release here.