Operation Leak Dismantles LeakBase Cybercriminal Forum – User Data, IP Logs Secured by Authorities
The Federal Bureau of Investigation (FBI), in collaboration with various international law enforcement agencies, has successfully seized LeakBase, a known cybercriminal forum engaged in the exchange of stolen databases. This action is part of a…
The Federal Bureau of Investigation (FBI), in collaboration with various international law enforcement agencies, has successfully seized LeakBase, a known cybercriminal forum engaged in the exchange of stolen databases. This action is part of a coordinated global operation known as "Operation Leak."
The primary domains, leakbase[.]ws and leakbase[.]la, have been redirected to an FBI seizure banner. The name servers have been changed to ns1.fbi.seized.gov and ns2.fbi.seized.gov .
The operation was executed under a German court order and a United States District Court for the District of Utah order, initiated by the U.S. Attorney’s Office for the District of Utah and the Department of Justice’s Computer Crime and Intellectual Property Section (CCIPS). This legal action was based on Title 18, United States Code, Sections 981 and 982, Title 21, United States Code, Section 853, and access device fraud under Title 18, United States Code, Section 1029.
The name servers have been changed to ns1.fbi.seized.gov and ns2.fbi.seized.gov .
LeakBase has been a significant cybercriminal destination specializing in database leaks, rapidly amassing a substantial user base since its inception. It served as a marketplace for threat actors to trade sensitive stolen data, including user credentials, credit card information, IP addresses, and corporate databases.
All content from the forum, encompassing user accounts, posts, credit details, private messages, and IP logs, has been secured for evidentiary purposes. Authorities have advised former forum users to report any interactions with the forum administrators or staff via a designated tip-line email: FBI-SU-Leakbase@fbi.gov.
The seizure of LeakBase is a significant disruption to the ecosystem of data-leak forums, which has been repeatedly targeted by law enforcement actions. The domains were registered on February 7, 2026, and seized on March 4, 2026. Former members of the forum face potential investigative risks, with any attempts to access or interfere with the seized site possibly leading to additional charges.
Based on reporting by Cyber Security News.
