Operation Leak Dismantles LeakBase Cybercriminal Forum – User Data, IP Logs Secured by Authorities

Operation Leak Dismantles LeakBase Cybercriminal Forum – User Data, IP Logs Secured by Authorities
Operation Leak Dismantles LeakBase Cybercriminal Forum – User Data, IP Logs Secured by Authorities
The FBI, in coordination with multiple international law enforcement agencies, has officially seized LeakBase, a prominent cybercriminal forum notorious for hosting and trading stolen databases, under a coordinated global operation dubbed “Operation Leak.”

Both primary domains, leakbase[.]ws and leakbase[.]la, now redirect visitors to an FBI seizure banner, with name servers switched to ns1.fbi.seized.gov and ns2.fbi.seized.gov.

The takedown was executed in accordance with a German court order and a court order issued by the United States District Court for the District of Utah, following an application by the U.S. Attorney’s Office for the District of Utah and the Department of Justice’s Computer Crime and Intellectual Property Section (CCIPS).

The legal action was pursued under Title 18, United States Code, Sections 981 and 982, Title 21, United States Code, Section 853, and for access device fraud under Title 18, United States Code, Section 1029.

Earlier, the FBI dismantled the Notorious Qakbot Infrastructure Used For Ransomware Attacks, causing damage in the hundreds of millions of dollars.

LeakBase, which emerged as one of the top cybercriminal destinations on the internet, specializes in database leaks and quickly gained a significant user base since its launch.

The forum served as a marketplace where threat actors could buy, sell, and share sensitive stolen data, including user credentials, credit card information, IP addresses, and corporate databases.

In the warning to former forum users, the seizure banner states: “All forum content, including users’ accounts, posts, credit details, private messages, and IP logs have been secured and preserved for evidentiary purposes.”

ywAAAAAAQABAAACAUwAOw==
Breach notice

Authorities also urged anyone who was active on the LeakBase forum or in contact with its administrators or staff to come forward, providing a dedicated tip-line email: FBI-SU-Leakbase@fbi.gov.

The operation involved an expansive coalition of international law enforcement agencies, reflecting the global reach of the cybercrime forum.

The seizure of LeakBase marks a significant blow to the data-leak forum ecosystem, which has seen repeated law enforcement actions targeting major platforms. Domain records confirm the .ws domain was registered on February 7, 2026, and both domains were last updated on March 4, 2026, the date of the seizure.

With all user data, IP logs, and private messages now in law enforcement’s hands, former members face serious investigative risk. Attempts to access, alter, or interfere with the seized site may result in additional criminal charges.

Follow us on Google News, LinkedIn, and X for daily cybersecurity updates. Contact us to feature your stories.

The post Operation Leak Dismantles LeakBase Cybercriminal Forum – User Data, IP Logs Secured by Authorities appeared first on Cyber Security News.


Discover more from RSS Feeds Cloud

Subscribe to get the latest posts sent to your email.

Leave a Reply

Your email address will not be published. Required fields are marked *

Discover more from RSS Feeds Cloud

Subscribe now to keep reading and get access to the full archive.

Continue reading