# Europol Shuts Down Hacker Forum LeakBase: Operation Details and Administrator Arrest
An international Europol operation has led to the shutdown of the English-language forum LeakBase—one of the largest marketplaces for trading stolen personal data databases. Since 2021, the site operated on the open web, amassing 142,000 users and an archive of hacked databases. On March 4, 2026, the forum's domain came under law enforcement control, and 37 active members were arrested across multiple countries.
LeakBase's Scale and Unique Features
Unlike typical dark web forums, LeakBase stood out for its accessibility on the regular web, making it easy for users to join. By the end of 2025, its stats included:
- 142,000 registered accounts;
- 32,000 posts;
- Over 215,000 messages in private chats.
The platform housed a vast archive, from old leaks to fresh compromises. This made it a prime resource for cybercriminals engaged in phishing, identity fraud, and data monetization.
The Europol operation was coordinated by the cybercrime center led by Edwardas Šileris. The center's head emphasized that the internet has no "untouchable corners" for transnational investigations. Participants' anonymity didn't protect them from identification and arrests.
Takedown Timeline
- Early March 2026: Europol announces LeakBase shutdown following raids and arrests across multiple jurisdictions.
- March 4: Seizure of the forum's domain.
- Late March: Detention in Russia of the alleged administrator—a resident of Taganrog.
Russian law enforcement seized technical devices from the suspect containing evidence. The investigation is under Article 272 of the Criminal Code of the RF (illegal access, collection, and storage of personal data in computer systems).
Impact on Cybercrime
The LeakBase takedown highlights the effectiveness of joint operations. Forums like this are chokepoints in attack chains: data leaks are aggregated, verified, and sold here. The shutdown reduces access to fresh databases, complicating attacks on financial systems, corporate networks, and personal accounts.
Experts note growing coordination between Europol, the FBI, and national police forces. Similar operations previously hit RaidForums and Nulled.to, where admins and moderators faced prison time.
Key Takeaways
- LeakBase operated on the open web since 2021, gathering 142,000 users and a massive leak archive.
- Europol arrested 37 people across several countries and seized the domain on March 4, 2026.
- In Russia, the Taganrog-based administrator was detained; evidence was seized for the personal data investigation.
- The operation underscores the vulnerability of anonymous platforms to international pressure.
- For DevSecOps: Monitoring such forums is critical for assessing leak risks in corporate environments.
The LeakBase shutdown signals systematic pressure on cybercrime infrastructure. Developers and security specialists should bolster database protection measures, including encryption, DLP systems, and regular audits.
— Editorial Team
No comments yet.