International law enforcement agencies have shut down a major online forum used by cybercriminals to trade stolen data and hacking tools. The site, known as LeakBase, had more than 142,000 registered members and thousands of posts where users shared information, bought access to stolen accounts, and discussed cybercrime techniques.
The operation was led by the FBI with support from law enforcement partners across multiple countries. When authorities seized the site, they also captured the forum’s underlying database, which contains records of user accounts, messages, and activity on the platform. Investigators say this information could help identify people involved in cybercrime and support ongoing cases.
What LeakBase Was Used For
LeakBase launched in 2021 and quickly became a popular destination in online cybercrime communities. The forum acted as a meeting place where people could buy and sell stolen data, including login credentials and personal information taken from past data breaches. Some users also shared hacking tools or offered services such as gaining access to compromised accounts.
Forums like this often operate as marketplaces within the cybercrime ecosystem. Instead of carrying out attacks themselves, some participants specialize in selling stolen information or providing tools that make it easier for others to launch attacks. This type of collaboration helps lower the barrier to entry for cybercrime, allowing less experienced individuals to participate.
The International Investigation
Authorities say the takedown was the result of a coordinated investigation involving agencies from fourteen countries. The operation included search warrants, arrests, and other enforcement actions targeting individuals connected to the forum. Investigators focused particularly on some of the platform’s most active users and administrators.
By taking control of the forum and its data, law enforcement agencies now have access to a large amount of information about how the platform operated and who used it. That information may help investigators identify additional suspects or connect individuals to specific cybercrime incidents.
Disrupting the Cybercrime Ecosystem
Cybercrime forums have long played a central role in the underground economy that supports hacking and online fraud. They provide a place for criminals to exchange knowledge, sell stolen data, and build networks with others involved in illegal activity.
Shutting down a forum like LeakBase can disrupt those networks and remove a hub where criminals coordinate and trade resources. However, cybersecurity experts note that these platforms often reappear in new forms. When one forum is taken offline, others frequently emerge to take its place.
For law enforcement, the value of these takedowns goes beyond simply shutting down a website. Access to the forum’s data may help investigators map connections between cybercriminals and build cases against people involved in larger networks of online crime.
Strengthening Your Defenses
For organizations, incidents like this are a reminder that the cybercrime economy is active, organized, and constantly evolving. Stolen credentials, leaked databases, and hacking tools traded on forums like LeakBase often originate from real businesses that lacked the visibility or protections needed to stop an attack early.If you want to better understand where your organization may be exposed, the cybersecurity team at InfoPathways can help assess your environment and build a practical plan to strengthen your security posture. Find out more...