FBI Shuts Down LeakBase, Seizes 142,000 Hacker Accounts and Private Messages, Delivering Blow to Global Cybercrime Networks

The Federal Bureau of Investigation (FBI) has successfully shut down LeakBase, one of the world’s largest cybercrime forums, in a coordinated international operation conducted in early March 2026. This decisive move targeted a platform that had been facilitating the widespread trafficking and sale of stolen personal data since 2021. The crackdowns involved collaboration between law enforcement agencies from 14 countries, underscoring the global scale and seriousness of this cybercrime network.

The FBI seized significant digital evidence from LeakBase, including data on approximately 142,000 forum members and over 215,000 internal messages. These possessions revealed the inner workings of the illicit marketplace, highlighting how criminals exchanged stolen accounts, credit card numbers, hacking tools, and other sensitive information. Assistant Director of the FBI Cyber Division Brett Leatherman emphasized that the evidence included IP logs, credit details, and private communications among users, sending a strong warning to hackers worldwide.

Details of the Enforcement Operation

The takedown of LeakBase stemmed from a meticulously coordinated operation stretching over two days. Agencies synchronized efforts to prevent any potential escape or erasure of critical data by the platform’s administrators. Law enforcement seized control of the forum’s domain, which now displays a government authority notice signaling the site’s closure.

Reports indicate that LeakBase hosted hundreds of millions of stolen credentials, including bank information and account passwords. The forum was notorious as a hub for buying and selling credit card numbers and specialized hacking tools that enabled cyberattacks. Its database was updated regularly, reflecting active engagement by its users in distributing newly compromised data.

The joint effort saw:

1. Official arrests of 13 suspects connected to the forum’s management and operation.
2. Searches and investigations targeting 33 other key figures tied to cybercriminal activities.
3. Enforcement actions totaling around 100 worldwide, coordinated through Europol and various national agencies.

This comprehensive crackdown focused particularly on 37 of the most active LeakBase users, who were allegedly instrumental in circulating stolen cryptocurrency assets and other sensitive data. Authorities view this initiative as a critical strike against the global underground market for digital identity theft.

Impact on Global Cybersecurity

Assistant Attorney General A. Tysen Duva of the U.S. Department of Justice highlighted that this enforcement action disrupts one of the central marketplaces for cybercriminals. Sites like LeakBase act as critical revenue streams for hackers who monetize stolen personal and financial information. The FBI’s move follows earlier successes, such as the 2022 closure of Raidforums, reinforcing law enforcement’s resolve to crack down systematically on cybercrime infrastructures.

With all content and user activity logs now in government possession, the operation aims not only to dismantle the forum but also to utilize evidence for future prosecutions. By removing such platforms, authorities hope to reduce the frequency of cyberattacks fueled by leaked credentials.

Why LeakBase Was a Major Threat

LeakBase’s scale positioned it uniquely as a hub in the cybercriminal ecosystem. The platform specialized in:

• Hosting and selling stolen credit card and bank account information.
• Providing hacking tools to facilitate further cyber intrusions.
• Maintaining a constantly updated repository of leaked data for sale.
• Serving an extensive global user base involved in illegal transactions.

Its ability to offer such comprehensive services made LeakBase a primary target for international law enforcement. Take-downs of sites like this have cascading effects, disrupting networks that rely heavily on these illicit data exchanges to commit identity theft, financial fraud, and cryptocurrency crimes.

Future Challenges and Law Enforcement Strategies

The LeakBase operation illustrates a growing trend of multinational cooperation against cybercrime. However, the persistence of such platforms, despite previous closures, indicates that criminals continually find ways to rebuild their infrastructures. Authorities therefore emphasize the importance of:

1. Strengthening international collaboration to prosecute offenders swiftly.
2. Increasing cybersecurity awareness to reduce individual vulnerability to data breaches.
3. Developing more advanced detection tools to uncover and dismantle hidden cyber forums.
4. Promoting robust laws and regulations that target digital marketplaces facilitating illegal data trade.

Analysts warn that while shutting down forums is vital, it must be part of a wider strategy involving prevention, education, and technological innovation to achieve lasting reductions in cybercrime.

Key Takeaways from the LeakBase Closure

• A joint operation involving 14 nations seized over 142,000 user records and 215,000 private communications.
• Authorities arrested 13 suspects and identified 37 top users for focused prosecution.
• LeakBase hosted hundreds of millions of stolen credentials, including credit card and banking information.
• The forum operated from 2021 until its closure in March 2026.
• The domain is under government control, displaying official seizure notices.
• This action follows similar efforts like Raidforums’ takedown in 2022, marking a persistent law enforcement campaign.

The shutdown of LeakBase represents a significant blow to the global cybercriminal underworld. It highlights the continuing evolution of enforcement tactics and the need for ongoing vigilance in cybersecurity efforts worldwide.