In a major international crackdown on cybercrime infrastructure, the Federal Bureau of Investigation (FBI), working alongside law enforcement agencies from 14 countries, has dismantled LeakBase, one of the world’s largest cybercriminal forums used to trade stolen data, compromised credentials, and software vulnerabilities.
The operation led to 13 arrests and nearly 100 law enforcement actions across multiple jurisdictions, marking another significant blow to organized cybercrime networks operating through underground online marketplaces.
142,000 Members Used LeakBase To Trade Stolen Data
Investigators revealed that LeakBase hosted more than 142,000 members, who used the platform to buy, sell, and exchange stolen login credentials, personal data, and system vulnerabilities.
According to the FBI, much of the information circulating on the forum had been illegally obtained through unauthorized access to corporate networks and government systems worldwide. The forum functioned as a hub where cybercriminals could monetize stolen information or collaborate with others to exploit security weaknesses.
The scale of the user base highlights how underground forums continue to play a critical role in enabling large-scale cybercrime ecosystems, connecting hackers, data brokers, and fraudsters across borders.
FCRF Launches Flagship Certified Fraud Investigator (CFI) Program
Law Enforcement Seizes Infrastructure And User Data
Authorities confirmed that the operation resulted in the complete shutdown of LeakBase’s infrastructure, including the seizure of its domains and servers.
Investigators also secured the forum’s entire database, which contains sensitive evidence such as:
- User account details
- Private messages between members
- IP logs and activity records
Law enforcement agencies stated that many users believed their activities were anonymous. However, officials confirmed that investigators were able to interact directly with suspects through the same communication channels they used to conduct criminal transactions.
The seized database is now being analysed to identify additional offenders connected to the platform.
Third Major Cybercrime Forum Takedown In Four Years
The FBI described the action against LeakBase as part of a broader effort to dismantle major criminal data marketplaces operating on the internet.
This marks the third major cybercrime forum dismantled in four years, following the takedowns of RaidForums and BreachForums, both of which were widely used for trading stolen databases and hacking tools.
Officials reiterated that law enforcement agencies will continue to target the infrastructure that cybercriminals rely on, warning that individuals operating on such platforms are not as anonymous as they believe.
Operation Winter SHIELD Launched To Help Organisations Defend Against Cyber Threats
While the forum’s shutdown disrupts criminal activity, authorities noted that data already circulated through the platform may still be exploited by cybercriminals.
To address this risk, the FBI has launched Operation Winter SHIELD, a nationwide initiative aimed at helping organizations strengthen their cybersecurity defenses.
The initiative focuses on 10 critical security measures that organizations can implement immediately, including stronger authentication systems and improved vulnerability patching practices.
According to officials, phish-resistant authentication can render stolen credentials useless, while consistent patch management can close vulnerabilities before attackers exploit them.
The campaign seeks to shift the balance in cybersecurity by pairing law enforcement action with stronger defensive measures, enabling organizations to build resilience against future attacks.
About the author – Rehan Khan is a law student and legal journalist with a keen interest in cybercrime, digital fraud, and emerging technology laws. He writes on the intersection of law, cybersecurity, and online safety, focusing on developments that impact individuals and institutions in India.
