Breachforums -
BreachForums operated as a typical dark web forum, with users accessing the site through Tor or other anonymization tools. Once registered, members could create posts, engage in discussions, and participate in auctions for various cyber goods and services. The platform's business model was straightforward: sellers offered their illicit wares, and buyers could purchase them using cryptocurrencies like Bitcoin or Monero.
A threat actor known as "ShinyHunters" (infamous for the Wattpad, Tokopedia, and BoostMobile breaches) attempted to relaunch the site. However, trust was broken. Users speculated that the relaunch was an FBI honeypot or that ShinyHunters had stolen the original user database from Pompompurin. BreachForums
| Date | Event | |------|-------| | March 2022 | RaidForums seized by DOJ/Europol. | | March–April 2022 | BreachForums created by “pompompurin” (aka “Pompompurin”). | | Mid-2022 | Grows quickly by hosting high-profile leaks (e.g., Robinhood, Twilio, Nvidia). | | March 2023 | Pompompurin arrested in New York. | | May 2023 | FBI seizes BreachForums domains; displays seizure banner. | | June 2023 | Pompompurin pleads guilty to conspiracy to commit access device fraud. | | Post-2023 | Multiple reboots (BreachForums 2.0 / 3.0) appear; none have original infrastructure. | BreachForums operated as a typical dark web forum,
BreachForums were a series of online marketplaces that operated on the dark web, accessible only through specialized software such as Tor. These forums allowed users to buy, sell, and trade stolen data, including personal identifiable information (PII), credit card numbers, and login credentials. The marketplaces were created to provide a platform for cybercriminals to monetize their illicit activities, making it easier for them to obtain and trade stolen data. A threat actor known as "ShinyHunters" (infamous for
The takedown of BreachForums sent shockwaves through the dark web, with many cybercriminals scrambling to find alternative marketplaces. The incident demonstrated that law enforcement agencies and cybersecurity experts can collaborate to disrupt and dismantle illicit platforms.
: The forum quickly grew to over 330,000 members, offering access to more than 14 billion individual records of personally identifying information (PII) across hundreds of datasets. Law Enforcement Actions :
By working together, we can mitigate the risks associated with cybercrime and create a safer online environment for all.

