Authorities Dismantle BreachForums’ Reemerged Clearnet Marketplace
International law enforcement agencies have successfully seized the clearnet domain breachforums[.]hn, effectively shutting down the latest iteration of the cybercrime marketplace known as BreachForums.
International law enforcement agencies have successfully seized the clearnet domain breachforums[.]hn, effectively shutting down the latest iteration of the cybercrime marketplace known as BreachForums.
The breachforums[.]hn domain, which first appeared in August 2025, now displays a notice indicating its control by law enforcement. This operation was conducted by the U.S. Department of Justice (DOJ), the Federal Bureau of Investigation (FBI), and French authorities, including the Brigade de Lutte Contre la Cybercriminalité (BL2C) and the Parquet de Paris (JUNALCO). The collaborative effort underscores the importance of international cooperation in combating cybercrime.
BreachForums gained prominence as the clearnet platform for the hacking group known as the “Trinity of Chaos.” Despite the group's announcement of retirement, the site continued to be monitored until its recent seizure.
BreachForums originally emerged as the successor to RaidForums, which was dismantled by law enforcement in 2022. The forum has seen multiple reappearances under different administrators, even after key arrests, including that of its original founder, Conor Brian Fitzpatrick, in March 2023.
The breachforums[.]hn domain, which first appeared in August 2025, now displays a notice indicating its control by law enforcement.
In May 2024, an earlier version of BreachForums was seized by the FBI and global partners, only to reappear under the control of ShinyHunters. The site has been linked to several arrests, including the charging of four individuals in France in June 2025 for their involvement in administering the forum.
Despite these disruptions, the forum has continued to resurface on new domains, perpetuating a cycle of shutdowns and relaunches. In August 2025, ShinyHunters warned of the forum being compromised, indicating internal challenges and instability.
While breachforums[.]hn is now offline, there are reports of a dark web version of BreachForums still being operational. Law enforcement agencies caution that the domain seizure will not eliminate the threat posed by this marketplace, as criminals may continue their activities on hidden platforms.
Authorities emphasize the need for continuous vigilance and international cooperation to effectively dismantle these networks. The recent seizure demonstrates the ongoing commitment of global agencies to disrupt cybercrime operations and prevent the unauthorized dissemination of sensitive data.
Based on reporting by GBHackers.
