FBI and Europol Seize LeakBase Forum Used to Trade Stolen Credentials

"All forum content, including users' accounts, posts, credit details, private messages, and IP logs, has been secured and preserved for evidentiary purposes. Available in English and accessible over the clearnet, LeakBase offered hacked databases, including hundreds of millions of account credentials and financial information such as credit and debit card numbers, banking account and routing information, usernames, and associated passwords that could be abused to facilitate account takeovers."

"LeakBase is one of the aliases for Chucky, who also goes by the monikers Chuckies and Sqlrip across various underground forums. Per SOCRadar, the threat actor has a track record of sharing vast collections of databases, often containing sensitive information from global entities."

"The LeakBase forum, per the U.S. Department of Justice (DoJ), had over 142,000 members and more than 215,000 messages between members as of December 2025. Those attempting to access the forum's website are now greeted with a seizure banner that says it was confiscated by the U.S. Federal Bureau of Investigation (FBI) as part of an international law enforcement effort."

LeakBase, one of the world's largest cybercriminal forums, has been shut down through an international law enforcement operation. The forum had over 142,000 members and 215,000 messages, operating since 2021 on the clearnet in English. It facilitated the sale of hacked databases containing hundreds of millions of account credentials, credit card numbers, banking information, and passwords. The forum was run by a threat actor known as Chucky, with administrators including BloodyMery, OrderCheck, and TSR. During Operation Leak on March 3-4, 2026, authorities executed search warrants and seized all forum content, including user accounts, posts, and IP logs, for evidentiary purposes.

Read at The Hacker News