A database containing records for 323,986 users was leaked by an individual known as "James".
BreachForums is a notorious online platform that has been involved in various cybercrime activities, including data breaches, hacking, and illicit trading of sensitive information. This report aims to provide an overview of BreachForums, its activities, and the implications of its operations.
Typically runs on MyBB software using a MySQL database.
BreachForums has hosted some of the most damaging public data leaks in cyber history, exposing hundreds of millions of consumer and state records worldwide.
As BreachForums gained notoriety, law enforcement agencies and cybersecurity experts began to take a closer look at the platform. A cat-and-mouse game ensued, with authorities attempting to identify and apprehend the platform's administrators and users, while the BreachForums team worked to stay one step ahead. breachforum
: Nicknames, registered email addresses, and private messages.
The Evolution and Impact of BreachForums on the Cyber Threat Landscape
: Many activities on such platforms are illegal. Law enforcement agencies worldwide work to monitor and dismantle these platforms.
The FBI and international partners seized the site’s infrastructure. However, the site was back online within a few days under new management (ShinyHunters). A database containing records for 323,986 users was
Weeks later, the notorious hacking group ShinyHunters teamed up with Baphomet to resurrect BreachForums. This second iteration hosted massive corporate leaks until DarkOwl reports the FBI seized the site again in May 2024 . Baphomet was arrested, and the forum's primary Telegram channels were intercepted.
Avoid making it too technical so it remains accessible, but include enough detail to show authenticity. Maybe add a twist where the protagonist finds a way to infiltrate the forum or stop the flow of stolen data.
BreachForums (2026 Status Report) BreachForums is a major cybercriminal marketplace for buying and selling stolen data, including hashed passwords, email addresses, and corporate leaks. Originally launched in 2022 as a successor to , it has undergone multiple law enforcement seizures and "reboots". Recent Critical Events (2026)
BreachForums acts as a centralized operational hub for various types of cyber threat actors. The platform relies on a structured tier system, escrow services, and forum credits to facilitate underground transactions. Typically runs on MyBB software using a MySQL database
The forum is characterized by a "hydra-like" resilience, frequently reappearing under new domains following law enforcement takedowns. ResearchGate v1 (March 2022 – March 2023): Created and led by Conor Brian Fitzpatrick
Internal corporate correspondence, operational logistics, and shipping tracking databases. Targeted supply chain exploitation and social engineering. 🛡️ The Cyber Threat Intelligence (CTI) Perspective
BreachForums was a notorious dark web marketplace that specialized in buying and selling stolen data, hacking tools, and other cybercrime-related services. The platform's rise and fall serve as a reminder of the ongoing cat-and-mouse game between law enforcement agencies and cybercrime operators. As the threat landscape continues to evolve, it is crucial for individuals and organizations to prioritize cybersecurity and stay informed about the latest developments in the dark web.
British national Kai West (aka "IntelBroker"), the forum owner between August 2024 and January 2025, was charged following a controlled purchase using Bitcoin.
For those defending enterprise networks, the BreachForum saga offers critical lessons.