Find notable cyber news and cases, enriched with sources, timelines, and signals.

Europol-led Operation Leak takedown of LeakBase

Law Enforcement
First reported
Last updated
Happening score
H score 67
2 unique sources, 2 articles

Summary

Hide ▲

Russian police in the Rostov region arrested a Taganrog resident believed to be the owner and administrator of LeakBase, a cybercrime forum used to buy and sell stolen data and hacking tools. The suspect is also accused of creating the platform, which surfaced in 2021 and grew to over 142,000 members before Operation Leak disrupted it in March 2026. The arrest extends the LeakBase enforcement action beyond the earlier multinational takedown and domain seizure.

Related Happenings

DOJ seizure of CFAKE.com and SOCFAKE.com deepfake domains

Law Enforcement
H score26 First: 16.06.2026 00:56 Last: 16.06.2026 00:56 Sources 1

About this happening: The **U.S. Department of Justice** and **Homeland Security Investigations** seized **CFAKE.com** and **SOCFAKE.com**, disrupting a **deepfake pornography** operation and taking th...

AudiA6 laundering ecosystem and Dark2Web forum

Threat Actor Meta
H score31 First: 11.06.2026 18:55 Last: 11.06.2026 18:55 Sources 1

About this happening: **AudiA6** was disrupted as an **industrial-scale cryptocurrency laundering service** used by **ransomware gangs** and other cybercriminal networks. Europol said the ecosystem lau...

Nottingham University data publication on ShinyHunters leak site

Data Leak
H score68 First: 10.06.2026 21:31 Last: 10.06.2026 21:31 Sources 1

About this happening: **Nottingham University** data was published on the **ShinyHunters** leak site after the group claimed access to the university’s **student records system**. The exposed material...

Charter Communications Salesforce data leak exposes 4.9 million accounts

Data Leak
H score72 First: 29.05.2026 11:29 Last: 29.05.2026 11:29 Sources 1

About this happening: The **public leak** of **Charter Communications** data exposed **4.9 million accounts**, putting names, email addresses, phone numbers, and physical addresses into circulation. Th...

Interpol Operation Ramz cybercrime crackdown in MENA

Law Enforcement
H score33 First: 18.05.2026 17:00 Last: 18.05.2026 17:00 Sources 1

About this happening: **INTERPOL**-led **Operation Ramz** disrupted **Sniper Dz**, a decade-long **phishing-as-a-service (PhaaS)** platform, during **October 2025-February 2026**. Authorities in **13 M...

Timeline

  1. 05.03.2026 11:45 2 articles · 4mo ago

    LeakBase arrests and searches on March 3

    Legal Policy Action Update

    Europol-coordinated action against LeakBase led police in the US, Australia, Belgium, Poland, Portugal, Romania, Spain, and the UK to make arrests, conduct house searches, and carry out knock-and-talk interviews, while Europol said 37 of the most active users and dozens more were targeted.

    Show sources
  2. 05.03.2026 11:45 1 articles · 4mo ago

    LeakBase domains seized the following day

    Legal Policy Action Update

    Authorities seized two LeakBase domains, replaced the homepage with a law-enforcement notice promoting Operation Leak, and took the forum's customer database, adding investigative records tied to the stolen-data marketplace.

    Show sources
  3. 05.03.2026 11:45 2 articles · 4mo ago

    Europol publishes LeakBase takedown details

    Initial Disclosure

    Europol described LeakBase as a surface-web forum for stolen data and stealer logs, said it had more than 142,000 registered users and around 32,000 posts by December 2025, and said it would keep tracing and unmasking offenders after the takedown.

    Show sources