Find notable cyber news and cases, enriched with sources, timelines, and signals.

First VPN had assets seized in First VPN takedown

Law Enforcement
First reported
Last updated
Happening score
H score 20
2 unique sources, 2 articles

Summary

Hide ▲

Authorities took down First VPN, a ransomware-linked service used to hide cybercrime activity, in a coordinated action led by France and the Netherlands. The operation ran from May 19 to 20 and dismantled 33 servers while seizing 3 domains. Investigators also interviewed the administrator during a house search in Ukraine.

Related Happenings

Guardia di Finanza dismantles CINEMAGOAL piracy network

Law Enforcement
First: 23.05.2026 17:23 Last: 23.05.2026 17:23 Sources 1

About this happening: Italian authorities **seized** **CINEMAGOAL** servers and dismantled a cross-border **takedown** of a piracy ecosystem that stole streaming authentication codes. The **Tutto Chiar...

First VPN Service as criminal VPN infrastructure for ransomware and fraud operators

Threat Actor Meta
First: 22.05.2026 20:35 Last: 22.05.2026 20:35 Sources 1

How related: First VPN, per Europol, offered services designed specifically for criminal use, allowing anonymous payments and a hidden infrastructure that enabled paying customers to hide their identities when carrying out ransomware attacks, large-scale fraud, and data theft.

About this happening: **First VPN Service** functioned as a criminal VPN layer that let ransomware, fraud, and data theft operators hide their identities, expanding the reach and resilience of undergro...

First VPN takedown by Europol and French-Dutch authorities

Law Enforcement
First: 21.05.2026 16:09 Last: 21.05.2026 16:09 Sources 1

How related: The disruption of First VPN Service was led by France and the Netherlands, with several other nations supporting the investigation since December 2021, including Luxembourg, Romania, Switzerland, Ukraine, the U.K., Canada, Germany, the U.S., Spain, Sweden, Denmark, Estonia, Latvia, Lithuania, Poland, and Portugal.

About this happening: **Europol** and **French and Dutch authorities** took **First VPN** offline in a cross-border operation that also **seized servers** and **arrested the administrator**. The case m...

Europol-led arrests in Albanian scam call center fraud case

Law Enforcement
First: 30.04.2026 13:00 Last: 30.04.2026 13:00 Sources 1

About this happening: **Europol** said a **two-year operation** ended with **10 arrests** at suspected **Albanian scam call centers**, disrupting a professionalized **investment fraud** network. Police...

Austrian-Albanian cryptocurrency fraud ring takedown

Law Enforcement
First: 29.04.2026 17:27 Last: 29.04.2026 17:27 Sources 1

About this happening: Austrian and Albanian authorities **dismantled** a **cryptocurrency investment fraud ring**, escalating a cross-border cyberfraud case that allegedly caused **over €50 million** i...

Timeline

  1. 21.05.2026 18:30 2 articles · 6d ago

    First VPN had assets seized in First VPN takedown

    Initial Disclosure

    Between **May 19 and 20, 2026**, **France and the Netherlands** led a coordinated operation against **First VPN**, dismantling servers and seizing domains. The action began with a search in **Ukraine** that targeted the service's administrator and infrastructure.

    Show sources