FBI, France seize BreachForums infrastructure
Law Enforcement
Summary
Hide ▲
Show ▼
FBI and French investigators seized BreachForums domains and backend infrastructure, disrupting a cybercrime forum used by ShinyHunters and related actors to publish stolen data and support Salesforce extortion. The action appears to have taken down breachforums[.]hn and displayed law-enforcement branding from the FBI, Justice Department, BL2C, and JUNALCO, while the related .onion site was reportedly still online. Threat actors said the seizure would not stop their Salesforce campaigns, and one statement claimed the forum’s backups and escrow databases had also been compromised.
Related Happenings
Finnish arrest and U.S. charges in Bouquet Scattered Spider case
Law Enforcement
First: 28.04.2026 18:39
Last: 28.04.2026 18:39
Sources 1
About this happening:
**Finnish law enforcement** arrested **Bouquet**, and **U.S. federal prosecutors** later charged him in a cross-border **Scattered Spider** cybercrime case. The charges include **...
Finnish arrest and U.S. charges in Bouquet Scattered Spider case
Law EnforcementAbout this happening: **Finnish law enforcement** arrested **Bouquet**, and **U.S. federal prosecutors** later charged him in a cross-border **Scattered Spider** cybercrime case. The charges include **...
Xu Zewei extradited for U.S. cyberespionage prosecution
Law Enforcement
First: 27.04.2026 22:56
Last: 27.04.2026 22:56
Sources 1
About this happening:
**Xu Zewei** was **extradited from Italy to the United States** to face criminal charges in a **cyberespionage** case tied to **China's MSS**. The move expands the legal exposure...
Xu Zewei extradited for U.S. cyberespionage prosecution
Law EnforcementAbout this happening: **Xu Zewei** was **extradited from Italy to the United States** to face criminal charges in a **cyberespionage** case tied to **China's MSS**. The move expands the legal exposure...
Tangeman sentencing in crypto-heist laundering case
Law Enforcement
First: 27.04.2026 16:01
Last: 27.04.2026 16:01
Sources 1
About this happening:
A U.S. court **sentenced Evan Tangeman** to **70 months in prison** for laundering cryptocurrency stolen in a **$230 million heist**, deepening criminal exposure in the cybercrime...
Tangeman sentencing in crypto-heist laundering case
Law EnforcementAbout this happening: A U.S. court **sentenced Evan Tangeman** to **70 months in prison** for laundering cryptocurrency stolen in a **$230 million heist**, deepening criminal exposure in the cybercrime...
Scattered Spider 2022 SMS phishing campaign targeting technology companies
Campaign
First: 21.04.2026 17:53
Last: 21.04.2026 17:53
Sources 1
About this happening:
Tyler Robert Buchanan’s guilty plea newly confirms **Scattered Spider**’s **2022 SMS phishing campaign**, showing it reached **at least a dozen major technology companies** and en...
Scattered Spider 2022 SMS phishing campaign targeting technology companies
CampaignAbout this happening: Tyler Robert Buchanan’s guilty plea newly confirms **Scattered Spider**’s **2022 SMS phishing campaign**, showing it reached **at least a dozen major technology companies** and en...
Tyler Robert Buchanan guilty plea in Scattered Spider crypto-theft case
Law Enforcement
First: 20.04.2026 16:33
Last: 20.04.2026 16:33
Sources 1
About this happening:
**Tyler Robert Buchanan** **pleaded guilty** in the **United States** in a **Scattered Spider** cybercrime case, increasing his criminal exposure for **wire fraud** and **aggravat...
Tyler Robert Buchanan guilty plea in Scattered Spider crypto-theft case
Law EnforcementAbout this happening: **Tyler Robert Buchanan** **pleaded guilty** in the **United States** in a **Scattered Spider** cybercrime case, increasing his criminal exposure for **wire fraud** and **aggravat...
Timeline
-
10.10.2025 11:24 4 articles · 7mo ago
Law enforcement seizes BreachForums infrastructure
Legal Policy Action UpdateThe FBI and French authorities take control of BreachForums domains and backend servers, with the latest domain update changing to FBI seizure nameservers and the forum infrastructure brought under law-enforcement control before the ShinyHunters group could complete a planned Salesforce data leak.
Show sources
- FBI takes down BreachForums portal used for Salesforce extortion — www.bleepingcomputer.com — 10.10.2025 11:24
- FBI takes down BreachForums portal used for Salesforce extortion — www.bleepingcomputer.com — 10.10.2025 11:24
- Feds Shutter ShinyHunters Salesforce Extortion Site — www.darkreading.com — 10.10.2025 19:38
- FBI and French Police Shutter BreachForums Domain Again — www.infosecurity-magazine.com — 13.10.2025 11:45
-
10.10.2025 11:24 1 articles · 7mo ago
ShinyHunters confirms takeover and keeps Salesforce leak campaign active
Campaign Scope UpdateShinyHunters confirm the BreachForums takeover on Telegram, say no one in the core admin team has been arrested, and state that they will not launch another BreachForums. They also say the Salesforce extortion campaign is still active, the dark web leak site remains online, and the group claims more than one billion customer records were stolen across companies including FedEx, Disney/Hulu, Home Depot, Marriott, Google, Cisco, Toyota, Gap, McDonald's, Walgreens, Instacart, Cartier, Adidas, Sake Fifth Avenue, Air France & KLM, Transunion, HBO MAX, UPS, Chanel, and IKEA.
Show sources
- FBI takes down BreachForums portal used for Salesforce extortion — www.bleepingcomputer.com — 10.10.2025 11:24