First VPN takedown by Europol and French-Dutch authorities
Law Enforcement
Summary
Hide ▲
Show ▼
Europol and French and Dutch authorities took First VPN offline in a cross-border operation that also seized servers and arrested the administrator. The case matters because the service was used in ransomware and data theft attacks and was part of cybercrime infrastructure. The action also enabled investigators to collect traffic data and identify users tied to broader cybercrime probes.
Related Happenings
Operation Endgame takedown of SocGholish and Evil Corp infrastructure
Law Enforcement
H score58
First: 18.06.2026 16:25
Last: 18.06.2026 16:25
Sources 1
About this happening:
**International law enforcement** disrupted **SocGholish/FakeUpdates** infrastructure in **Operation Endgame** on **June 18**, cleaning **14,971 compromised WordPress websites** a...
Operation Endgame takedown of SocGholish and Evil Corp infrastructure
Law EnforcementAbout this happening: **International law enforcement** disrupted **SocGholish/FakeUpdates** infrastructure in **Operation Endgame** on **June 18**, cleaning **14,971 compromised WordPress websites** a...
Europol-led AudiA6 crypto-laundering takedown
Law Enforcement
H score29
First: 11.06.2026 18:55
Last: 11.06.2026 18:55
Sources 1
About this happening:
**Law enforcement** dismantled **AudiA6**, a **cryptocurrency laundering service** used by **ransomware gangs** and other cybercriminal networks, in a **June 10, 2026** multinatio...
Europol-led AudiA6 crypto-laundering takedown
Law EnforcementAbout this happening: **Law enforcement** dismantled **AudiA6**, a **cryptocurrency laundering service** used by **ransomware gangs** and other cybercriminal networks, in a **June 10, 2026** multinatio...
Dutch police and NCSC seize botnet infrastructure
Law Enforcement
H score40
First: 29.05.2026 17:26
Last: 29.05.2026 17:26
Sources 1
About this happening:
Dutch police and the **NCSC** seized **more than 200 servers** and took offline a **17 million-device botnet**, disrupting infrastructure used for **cyberattacks**. The action fol...
Dutch police and NCSC seize botnet infrastructure
Law EnforcementAbout this happening: Dutch police and the **NCSC** seized **more than 200 servers** and took offline a **17 million-device botnet**, disrupting infrastructure used for **cyberattacks**. The action fol...
Dutch National Police arrest Ajax hack suspect
Law Enforcement
H score35
First: 27.05.2026 12:09
Last: 27.05.2026 12:09
Sources 1
About this happening:
The **Dutch National Police** arrested a **35-year-old man from Buren** in a **computer trespassing** case tied to **Ajax Amsterdam (AFC Ajax)**, escalating a criminal probe into...
Dutch National Police arrest Ajax hack suspect
Law EnforcementAbout this happening: The **Dutch National Police** arrested a **35-year-old man from Buren** in a **computer trespassing** case tied to **Ajax Amsterdam (AFC Ajax)**, escalating a criminal probe into...
Guardia di Finanza dismantles CINEMAGOAL piracy network
Law Enforcement
H score20
First: 23.05.2026 17:23
Last: 23.05.2026 17:23
Sources 1
About this happening:
Italian authorities **seized** **CINEMAGOAL** servers and dismantled a cross-border **takedown** of a piracy ecosystem that stole streaming authentication codes. The **Tutto Chiar...
Guardia di Finanza dismantles CINEMAGOAL piracy network
Law EnforcementAbout this happening: Italian authorities **seized** **CINEMAGOAL** servers and dismantled a cross-border **takedown** of a piracy ecosystem that stole streaming authentication codes. The **Tutto Chiar...
Timeline
-
21.05.2026 16:09 2 articles · 1mo ago
Europol and French-Dutch authorities dismantle First VPN
Initial DisclosureEuropol and French and Dutch authorities took First VPN offline in a joint international law enforcement operation, seizing 33 servers, taking down 1vpns.com, 1vpns.net, 1vpns.org and related onion domains, arresting the administrator, searching a house in Ukraine, and sharing intelligence about 506 users linked to ransomware and data theft activity.
Show sources
- Police seize “First VPN” service used in ransomware, data theft attacks — www.bleepingcomputer.com — 21.05.2026 16:09
- First VPN Dismantled in Global Takedown Over Use by 25 Ransomware Groups — thehackernews.com — 22.05.2026 20:35