FBI and Europol Dismantle LeakBase Cybercrime Forum, Secure Data of 142,000 Members

The FBI has seized the cybercrime forum LeakBase, a platform widely used for buying and selling stolen data, hacking tools, and illicit services. The takedown was carried out as part of a coordinated international effort known as Operation Leak, led by Europol and involving law enforcement agencies across 14 countries.

On March 3 and 4, federal agents shut down the forum by seizing two of its domains and replacing them with official seizure banners. Authorities also executed search warrants, conducted interviews, and made arrests in multiple jurisdictions.

International Operation Spanning Multiple Countries

The joint enforcement action included operations in the United States as well as Australia, Belgium, Poland, Portugal, Romania, Spain, and the United Kingdom. The coordinated nature of the takedown highlights the increasingly global approach to combating organized cybercrime networks.

According to the seizure notice now displayed on leakbase[.]la, the website has been confiscated by the FBI as part of an international law enforcement operation. The banner warns former members that the platform’s database has been preserved for investigative purposes.

Database of 142,000 Members Secured

Authorities confirmed that the forum’s infrastructure and content have been secured. This includes user accounts, posts, payment information, private messages, and IP logs associated with approximately 142,000 registered members.

The notice states that all forum content has been preserved for evidentiary purposes. Attempts to access or interfere with the seized infrastructure could result in additional criminal charges.

The preservation of logs and private messages may provide investigators with actionable intelligence on broader criminal networks, ransomware affiliates, and data trafficking operations.

A Marketplace for Stolen Data

LeakBase functioned as a marketplace for compromised databases, account credentials, and hacking utilities. Forums of this type often act as aggregation points where stolen information is monetized and cybercrime tools are traded.

Such platforms serve as enablers for secondary crimes, including identity theft, ransomware attacks, business email compromise, and financial fraud.

Signal to the Underground Economy

The seizure sends a clear message to participants in the cybercrime ecosystem. While many underground forums operate on offshore infrastructure and anonymized hosting services, international cooperation has increasingly reduced safe havens for operators.

Operation Leak demonstrates that even platforms with tens of thousands of users are not beyond reach. The involvement of private sector partners also underscores the growing collaboration between industry and law enforcement in identifying and dismantling digital criminal infrastructure.

What Happens Next

With the forum database now in law enforcement hands, investigators are expected to analyze user activity and transaction records to identify high-priority targets. Past takedowns of similar platforms have resulted in follow-up arrests months or even years after the initial seizure.

For members of LeakBase, the risk now extends beyond the loss of a marketplace. The stored data may become central evidence in future prosecutions.

As global enforcement actions intensify, the balance between anonymity and accountability in the cybercrime underground continues to shift.