Find notable cyber news and cases, enriched with sources, timelines, and signals.

FBI, France seize BreachForums infrastructure

Law Enforcement
First reported
Last updated
Happening score
H score 20
3 unique sources, 3 articles

Summary

Hide ▲

FBI and French investigators seized BreachForums domains and backend infrastructure, disrupting a cybercrime forum used by ShinyHunters and related actors to publish stolen data and support Salesforce extortion. The action appears to have taken down breachforums[.]hn and displayed law-enforcement branding from the FBI, Justice Department, BL2C, and JUNALCO, while the related .onion site was reportedly still online. Threat actors said the seizure would not stop their Salesforce campaigns, and one statement claimed the forum’s backups and escrow databases had also been compromised.

Related Happenings

Finnish arrest and U.S. charges in Bouquet Scattered Spider case

Law Enforcement
First: 28.04.2026 18:39 Last: 28.04.2026 18:39 Sources 1

About this happening: **Finnish law enforcement** arrested **Bouquet**, and **U.S. federal prosecutors** later charged him in a cross-border **Scattered Spider** cybercrime case. The charges include **...

Xu Zewei extradited for U.S. cyberespionage prosecution

Law Enforcement
First: 27.04.2026 22:56 Last: 27.04.2026 22:56 Sources 1

About this happening: **Xu Zewei** was **extradited from Italy to the United States** to face criminal charges in a **cyberespionage** case tied to **China's MSS**. The move expands the legal exposure...

Tangeman sentencing in crypto-heist laundering case

Law Enforcement
First: 27.04.2026 16:01 Last: 27.04.2026 16:01 Sources 1

About this happening: A U.S. court **sentenced Evan Tangeman** to **70 months in prison** for laundering cryptocurrency stolen in a **$230 million heist**, deepening criminal exposure in the cybercrime...

Scattered Spider 2022 SMS phishing campaign targeting technology companies

Campaign
First: 21.04.2026 17:53 Last: 21.04.2026 17:53 Sources 1

About this happening: Tyler Robert Buchanan’s guilty plea newly confirms **Scattered Spider**’s **2022 SMS phishing campaign**, showing it reached **at least a dozen major technology companies** and en...

Tyler Robert Buchanan guilty plea in Scattered Spider crypto-theft case

Law Enforcement
First: 20.04.2026 16:33 Last: 20.04.2026 16:33 Sources 1

About this happening: **Tyler Robert Buchanan** **pleaded guilty** in the **United States** in a **Scattered Spider** cybercrime case, increasing his criminal exposure for **wire fraud** and **aggravat...

Timeline

  1. 10.10.2025 11:24 4 articles · 7mo ago

    Law enforcement seizes BreachForums infrastructure

    Legal Policy Action Update

    The FBI and French authorities take control of BreachForums domains and backend servers, with the latest domain update changing to FBI seizure nameservers and the forum infrastructure brought under law-enforcement control before the ShinyHunters group could complete a planned Salesforce data leak.

    Show sources
  2. 10.10.2025 11:24 1 articles · 7mo ago

    ShinyHunters confirms takeover and keeps Salesforce leak campaign active

    Campaign Scope Update

    ShinyHunters confirm the BreachForums takeover on Telegram, say no one in the core admin team has been arrested, and state that they will not launch another BreachForums. They also say the Salesforce extortion campaign is still active, the dark web leak site remains online, and the group claims more than one billion customer records were stolen across companies including FedEx, Disney/Hulu, Home Depot, Marriott, Google, Cisco, Toyota, Gap, McDonald's, Walgreens, Instacart, Cartier, Adidas, Sake Fifth Avenue, Air France & KLM, Transunion, HBO MAX, UPS, Chanel, and IKEA.

    Show sources