In May 2023, users logged into BreachForum to find a shocking message: Domain seized. This was not a traditional "exit scam" (where admins steal user deposits). Instead, the homepage displayed a banner indicating seizure by the FBI, Secret Service, and Dutch National Police.
Unlike the RaidForums takedown, which involved arresting the owner, Operation "Cookie Monster" (the codename for the BreachForum seizure) involved a multi-phase infiltrative approach.
The seizure notice read: "This domain has been seized by the United States Secret Service as part of a coordinated law enforcement action against BreachForum."
This was the main attraction. Threat actors would dump SQL files from compromised websites. Notable real-world leaks on BreachForums included:
Q: Is BreachForums still accessible? A: The original .vc domain is seized by the FBI. Clones exist but are widely considered untrustworthy or honeypots.
Q: Can I get in trouble for visiting BreachForums? A: Yes, in many jurisdictions. Simply accessing a forum that sells stolen data can constitute "unauthorized access" or "possession of stolen property" if you view credentials.
Q: Does BreachForums have my password? A: If you haven’t changed your password since 2021-2023 across major platforms, there is a statistically high probability that your hash is in their archive. Change it now.
Q: Who was Pompompurin? A: Conor Brian Fitzpatrick, a 20-year-old from New York, who founded and operated BreachForums. He faces up to 20 years in federal prison.
BreachForums (often referred to as "Breached") has served as a central hub for the English-speaking cybercriminal underground since its inception in March 2022. As a spiritual successor to RaidForums, it specialized in the distribution and sale of stolen databases, hacking tools, and various illicit services. Historical Background and Leadership
The forum's history is defined by a cycle of law enforcement takedowns and rapid resurrections. breachforum
Origin (2022): Founded by 19-year-old Conor Brian Fitzpatrick, known as "pompompurin," shortly after RaidForums was seized.
First Takedown (2023): Fitzpatrick was arrested in March 2023. An administrator known as "Baphomet" briefly took over but shut the site down due to security concerns shortly after.
Revival and Second Takedown (2023–2024): The forum was later reopened by the hacking group ShinyHunters and Baphomet. In May 2024, the FBI seized its domains and Telegram channels, reportedly arresting Baphomet.
Resentencing of Founder: In September 2025, Fitzpatrick was resentenced to three years in federal prison following an appeal by the government. Core Features and Activities
BreachForums functioned as a "town square" for data-driven cybercrime.
BreachForums (and its various iterations) is an English-language cybercrime forum and marketplace primarily used for the trade and distribution of stolen data Operational History and Key Reviews Purpose and Impact
: It emerged in 2022 as a successor to RaidForums. It is widely considered one of the most significant hubs for large-scale data breaches, hosting over 14 billion records across 888+ datasets as of mid-2024. Law Enforcement Actions
: The platform has been a major target for global authorities. In May 2024, the FBI and international partners successfully seized the servers used to host the site. A primary administrator, known as IntelBroker , was reportedly arrested in February 2025. Security and Credibility Concerns Honeypot Warnings
: Security researchers and even former administrators have warned that many current "BreachForums" clones are likely —sites controlled by law enforcement to entrap hackers. Data Leaks In May 2023, users logged into BreachForum to
: In January 2026, the forum itself suffered a massive data leak exposing details for over 320,000 users
, including email addresses and password hashes. This has led to a significant decline in trust within the cybercrime community. FBI Reporting : The FBI maintains a formal Reporting Form
for victims or individuals with information related to investigations into various versions of BreachForums. Summary of Current Status (as of April 2026)
BreachForums (also known as ) is a notorious underground cybercrime forum that rose to prominence as the primary successor to RaidForums
. It serves as a central hub for the trade, discussion, and distribution of stolen data, ranging from corporate databases to personal identification information (PII). Origins and Rise
BreachForums was launched in early 2022 by a threat actor known as Pompompurin
shortly after the FBI seized RaidForums. It quickly absorbed the former site’s user base, becoming the most active clearinghouse for leaked data globally. The forum gained international notoriety for hosting high-profile leaks, including data stolen from major entities like the FBI’s InfraGard U.S. House of Representatives D.C. Health Link downloads.ctfassets.net Law Enforcement Actions
The forum has been the target of multiple international law enforcement operations: The 2023 Takedown
: In March 2023, the FBI arrested the forum’s founder, Conor Brian Fitzpatrick (Pompompurin), in New York. Shortly after, the site was shut down by its remaining administrators due to fears of law enforcement infiltration. The 2024 Resurgence and Seizure The seizure notice read: "This domain has been
: The forum was later revived under new management (notably a user named ShinyHunters
group). However, in mid-2024, the FBI and international partners successfully dismantled this iteration as well. Ongoing Persistence
: Despite repeated seizures, various mirrors and Telegram-based alternatives continue to appear, highlighting the "whack-a-mole" nature of cybercrime forum moderation. Gibson Research Core Activities Database Leaks
: Users post "leaks" (free data) or "sales" (paid data) containing emails, passwords, social security numbers, and financial records. Cyber-Extortion : Groups like ShinyHunters
use the platform to issue public extortion demands to large corporations. Community & Tutorials
: Beyond trading data, the forum hosts discussions on hacking techniques, social engineering, and the sale of malicious tools. ResearchGate The "New" BreachForums (2025-2026)
Recent reports indicate that BreachForums has undergone various "makeovers" to bypass filters and tracking. It remains a critical source for Cyber Threat Intelligence (CTI)
, as researchers and security firms monitor the site to alert organizations of newly exposed data. www.deleteme.com high-profile data breaches that originated on BreachForums, or more details on the legal proceedings against its administrators?
AI responses may include mistakes. For legal advice, consult a professional. Learn more