{"id":14320,"date":"2025-06-26T15:20:59","date_gmt":"2025-06-26T15:20:59","guid":{"rendered":"https:\/\/newestek.com\/?p=14320"},"modified":"2025-06-26T15:20:59","modified_gmt":"2025-06-26T15:20:59","slug":"us-indicts-one-for-role-in-breachforums-france-arrests-four-others","status":"publish","type":"post","link":"https:\/\/newestek.com\/?p=14320","title":{"rendered":"US indicts one for role in BreachForums, France arrests four others"},"content":{"rendered":"
\n
\n
\n
\n
\n
\n
<\/div>\n<\/section>\n

-Shweta Sharma<\/p>\n

<\/em>A US court indicted a man accused of being IntelBroker, a key administrator of stolen data marketplace BreachForums, on Wednesday, just days after four others accused of running the site alongside him were arrested in France<\/p>\n

British national Kai West, 25, was arrested in France in February, and US authorities are seeking to extradite him to the US to face the charges on which he was indicted in the US District Court for the Southern District of New York.<\/a> These include conspiracy to commit computer intrusions, wire fraud offenses and unauthorized access to protected computers.<\/p>\n

Earlier in the week, the French Cybercrime Brigade arrested four people believed to be ShinyHunters, Hollow, Noct, and Depressed, also involved in BreachForums, according to French media reports.<\/p>\n

Together, the five are believed to have taken over the site following the June 2023 arrest of its founder<\/a> Conor Brian Fitzpatrick, aka Pompompurin. The warrant issued for West\u2019s arrest in February<\/a> claimed that he and his co-conspirators had cumulatively caused the victims of computer intrusions and thefts of data losses of at least $25 million.<\/p>\n

The arrests mark a major blow to the latest iteration of BreachForums, a marketplace long linked to high-profile data breaches and identity theft campaigns.<\/p>\n

Stephen Kowski, Field CTO at email security provider SlashNext, said, \u201cThese arrests represent a significant win for international law enforcement and demonstrate that cybercriminals can\u2019t hide behind forum anonymity forever.\u201d<\/p>\n

Prosecutors allege West stole and sold data from entities spanning government agencies, telecoms providers, tech giants including AMD<\/a>, HPE<\/a>, and Nokia, and healthcare providers.<\/p>\n

Assumed active on BreachForums since shortly after pompompurin\u2019s arrest, IntelBroker claimed responsibility for a series of high profile hacks between January 2023 and December 2024, including Europol<\/a>, DC Health Link, Cisco<\/a> and General Electric<\/a>, operating primarily through the forum for trading stolen health records, internal corporate documents, and user data.<\/p>\n

On BreachForums, IntelBroker was briefly a member of a racist cybercrime group CyberNiggers and became a prominent member there before taking on the leadership of BreachForums 2.0. Having identified himself as a Serbian living in Russia in a previous interview<\/a>, IntelBroker has dismissed<\/a> allegations of ties to the Iranian state as \u201coutrageous\u201d.<\/p>\n

West was reportedly arrested by French authorities in February 2025, days after IntelBroker posted his resignation<\/a> as BreachForums admin and owner citing \u2018lack of time\u2019 as the reason for doing so. He remains in custody there while US authorities seek his extradition.<\/p>\n

If convicted in the US, he could face up to 25 years in prison on several of the charges filed against him.<\/p>\n

<\/a>Four alleged co-conspirators nabbed in France<\/h2>\n

Following an investigation by the Cybercrime Brigade of the Paris Police Prefecture, French police arrested four people believed to be BreachForums operators ShinyHunters, Hollow, Noct, and Depressed in coordinated raids in the Paris region, Normandy and on the French island of Reunion earlier this week, according to a report by French newspaper Le Parisien<\/a>. All four are reportedly French and in their twenties, the newspaper reported.<\/p>\n

The four are believed to have helped manage and moderate the revived BreachForums after its 2023 takedown. While ShinyHunters and Hollow held admin and moderator roles, respectively, the involvement of Noct and Depressed remains less defined.<\/p>\n

The Paris Police Prefecture did not respond to a request for comment.<\/p>\n

BreachForums, a successor to the shuttered RaidForum<\/a>s, has long operated as a go-to-marketplace for stolen data\u2013facilitating leaks tied to breaches of major French entities like Boulanger, SFR, France Travail, and the French Football Federation. Despite multiple takedowns<\/a> and arrests of key admins, the forum repeatedly resurfaced under new leadership continuing to fuel cybercrime across borders.<\/p>\n

And that may not be the end of it, warned Agnidipta Sarkar, chief evangelist at ColorTokens, developer of a Zero Trust microsegmentation platform.<\/p>\n

\u201cIt remains unknown whether there are remnants of their organization that could revive themselves to be smarter and more egregious, mainly because the forum\u2019s reemergence after previous takedowns in 2023 and 2024 demonstrates its resilience,\u201d Sarkar said.<\/p>\n

Whether it\u2019s BreachForums that returns, or another such site, said SlashNext\u2019s Kowski, \u201cOrganizations need to assume their data will eventually surface on these platforms and focus on real-time protection that can detect and block attacks even when using legitimate but compromised credentials or information.\u201d<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

-Shweta Sharma A US court indicted a man accused of being IntelBroker, a key administrator of stolen data marketplace BreachForums, on Wednesday, just days after four others accused of running the site alongside him were arrested in France British national Kai West, 25, was arrested in France in February, and US authorities are seeking to extradite him to the US to face the charges on… <\/p>\n

Read More<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-14320","post","type-post","status-publish","format-standard","hentry","category-uncategorized","is-cat-link-borders-light is-cat-link-rounded"],"_links":{"self":[{"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/posts\/14320","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/newestek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=14320"}],"version-history":[{"count":0,"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/posts\/14320\/revisions"}],"wp:attachment":[{"href":"https:\/\/newestek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=14320"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newestek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=14320"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newestek.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=14320"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}