CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Seizure of major cybercrime forum LeakBase and arrest of suspected owner

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

Russian law enforcement arrested a Taganrog resident suspected of founding and administering the LeakBase cybercrime forum in the Rostov region on March 26, 2026. The forum, active since 2021 and previously supported by the ARES threat group, served as a major hub for cybercriminals to trade stolen data, hacking tools, and related services, accumulating over 142,000 members after the Breached forum’s closure in March 2023. The arrest follows a coordinated international takedown codenamed Operation Leak, executed by law enforcement agencies across 15 countries including the U.S., U.K., and multiple EU states, resulting in approximately 100 enforcement actions, including raids, interviews, arrests, and domain seizure.

Timeline

  1. 26.03.2026 14:50 1 articles · 1h ago

    International law enforcement seizes LeakBase cybercrime forum and arrests suspected owner

    On March 3, 2026, law enforcement agencies across 15 countries executed a coordinated takedown of the LeakBase cybercrime forum as part of Operation Leak. The operation included approximately 100 enforcement actions, such as arrests, house searches, and interviews, targeting the forum’s suspected owner—a Taganrog resident—and 37 of its most active users. The forum’s domain (leakbase[.]la) was seized and replaced with an FBI splash page, with authorities stating the forum’s database and contents would be used as evidence in future investigations. The operation has since entered a prevention phase aimed at deterring further cybercriminal activity.

    Show sources
    Open in new tab

Information Snippets

  • The suspect, a Taganrog resident, is accused of founding and administering the LeakBase cybercrime forum, which facilitated trade in stolen databases, exploits, hacking tools, and cybercrime services.

    First reported: 26.03.2026 14:50
    1 source, 1 article
    Show sources

  • LeakBase was established in 2021 and had over 142,000 members by March 2023, growing significantly after the Breached forum’s shutdown.

    First reported: 26.03.2026 14:50
    1 source, 1 article
    Show sources

  • On March 3, 2026, an international operation named Operation Leak targeted LeakBase, leading to approximately 100 enforcement actions across 15 countries, including arrests, house searches, and interviews.

    First reported: 26.03.2026 14:50
    1 source, 1 article
    Show sources

  • The forum’s domain leakbase[.]la was seized by the FBI and replaced with a law enforcement splash page, with a notice indicating the forum’s database and contents will be used as evidence.

    First reported: 26.03.2026 14:50
    1 source, 1 article
    Show sources

  • The operation included measures against 37 of the most active users and has entered a prevention phase to deter further cybercriminal activity.

    First reported: 26.03.2026 14:50
    1 source, 1 article
    Show sources