Russia Arrests LeakBase Admin After Takedown
Russian law enforcement has detained a person accused of operating the notorious cybercriminal forum LeakBase, as reported by the state media outlet TASS this week.
The Target of the Investigation
The individual, whose identity remains undisclosed by authorities, is alleged to be both the administrator and founder of the platform. Reports indicate the suspect is a resident of Taganrog, a city in southern Russia. This development follows a major international law enforcement action earlier this month that resulted in the takedown of LeakBase's primary website.
Scope of the Cybercriminal Forum
Launched in 2021, LeakBase grew into a significant hub for cybercriminal activity. It functioned as a massive repository for stolen data and a marketplace for illicit tools. The forum's seized archives contained:
- Hundreds of millions of username and password pairs.
- Bank account details and routing numbers.
- Comprehensive credit card information.
- Various hacking tools and guides.
U.S. officials described the site as one of the globe's principal meeting points for criminals to trade such compromised data and techniques.
Details of the Global Takedown Operation
The shutdown was the result of a coordinated effort spanning multiple nations. Led by U.S. authorities and Europol, the operation included law enforcement agencies from 14 countries. Actions taken during the operation included:
- Executing multiple search warrants.
- Conducting arrests and interviews across several nations.
- Confiscating the forum's backend data, which held records of over 142,000 members and 215,000 private messages.
Nations with direct operational activities included Australia, Belgium, Poland, Portugal, Romania, Spain, the United Kingdom, and the United States. Independent reports confirm a total of 13 arrests were made globally in connection to the forum.
International Response and Clarifications
In response to the arrest in Russia, a Europol spokesperson clarified that the European agency was not involved in this specific detention and does not collaborate with Russian authorities. The U.S. Department of Justice has not provided additional commentary on the Russian arrest at this time. The overall operation underscores a continuing global focus on dismantling infrastructures that support large-scale cybercrime and data theft.
