Authorities Seize BreachForums New Clearnet Cybercrime Marketplace Domain
International law enforcement agencies have seized the clearnet domain of the cybercrime marketplace, BreachForums.
International law enforcement agencies have seized the clearnet domain of the cybercrime marketplace, BreachForums.
The domain, breachforums[.]hn , now displays a seizure notice from the U.S. Department of Justice (DOJ), the Federal Bureau of Investigation (FBI), and French authorities, including the Brigade de Lutte Contre la Cybercriminalité (BL2C) and the Parquet de Paris (JUNALCO).
This action is part of ongoing efforts to dismantle the data leak site. The seizure notice confirms the domain is under law enforcement control and provides contact details for reporting information about the forum's criminal activities.
The breachforums[.]hn domain was introduced as a new platform for the forum in August 2025.
BreachForums has experienced multiple takedowns and rapid re-establishments. It succeeded RaidForums , a similar forum seized in 2022.
The original BreachForums was shut down in March 2023 after the arrest of its founder, Conor Brian Fitzpatrick, known as "Pompompurin."
International law enforcement agencies have seized the clearnet domain of the cybercrime marketplace, BreachForums.
Despite the arrest, the forum was revived by other administrators. In May 2024, the FBI and international partners seized the site again, but it reappeared shortly thereafter under the control of the ShinyHunters group.
Since then, BreachForums has operated on various domains, continuing to serve as a marketplace for stolen data, hacking tools, and other illicit materials.
Law enforcement has made several arrests related to the forum's administration, including four individuals in France in June 2025. However, the core operation has proven resilient, with new administrators and domains emerging after each disruption.
The latest seizure follows internal conflicts among the groups managing the forum. In August 2025, ShinyHunters warned that BreachForums had been compromised and was operating as a law enforcement honeypot.
The recent seizure of the .hn domain coincides with the apparent dissolution of the "Scattered Lapsus$ Hunters" alliance.
A corresponding Telegram channel used by the group experienced confusion over the disappearance of a key figure before being locked by an administrator.
While the clearnet site has been taken down, reports suggest that its dark web counterpart remains active, indicating ongoing challenges in combating the cybercrime enterprise.
Based on reporting by Cyber Security News.
