French law enforcement has successfully dismantled one of the world’s largest cybercriminal marketplaces, arresting four French nationals in their twenties who operated BreachForums, the premier destination for trading stolen personal data.
The operation, conducted by Paris police’s specialized Cybercrime Brigade (BL2C), represents a significant victory against international cybercrime networks that were previously believed to operate from Russian territory.
The arrested individuals, operating under the aliases “ShinyHunters,” “Hollow,” “Noct,” and “Depressed,” had successfully maintained their anonymity while orchestrating one of the internet’s most prolific data trading platforms.
Their arrests occurred across multiple French regions, including Hauts-de-Seine, Seine-Maritime, and Réunion, demonstrating the geographic spread of their operations.
BreachForums served as what cybersecurity expert Benoît Grunenwald from ESET describes as “the historic crossroads between those who attack companies and those looking to buy fresh data.”
The platform facilitated the sale of databases containing sensitive personal information stolen from major corporations and organizations worldwide.
The cybercriminal network assumed control of BreachForums following the FBI’s arrest of American citizen Conor Brian Fitzpatrick, known by his pseudonym “Pompompurin,” in March 2023.
Fitzpatrick was suspected of being the platform’s primary administrator before the French team took over operations.
The transition marked a shift in the platform’s management structure, with five discreet French operators working behind sophisticated digital disguises.
Major Data Breaches
The investigation revealed that BreachForums was directly connected to numerous high-profile data breaches affecting French organizations and companies.
Among the victims were major retailers like Boulanger, telecommunications giant SFR, the national employment agency France Travail, and the French Football Federation.
These breaches compromised sensitive personal information of millions of French citizens.
The platform’s operations began showing signs of disruption earlier this year when “Intelbroker,” identified as the first of the arrested hackers, was apprehended in February.
Following this initial arrest, the remaining administrators became increasingly cautious and temporarily suspended the website’s operations in April, sensing potential exposure by law enforcement.
Investigation Dismantles Criminal Network
The successful operation represents the culmination of an extensive international investigation that challenged initial assumptions about the platform’s origins.
According to Report, BreachForums was operated from Russian-speaking territories, the arrests revealed a sophisticated French criminal network operating domestically.
Grunenwald emphasizes that the presence of French nationals in leadership positions shouldn’t be surprising, noting that “there is indeed an internal threat with cyber capabilities that these cybercriminals could use to better effect.”
The technical sophistication required to maintain such a platform demands considerable expertise, as administrators must prove their capabilities and build trust within anonymous criminal networks.
The arrests are expected to significantly impact BreachForums’ operations and the broader cybercriminal ecosystem.
The dismantling of trust networks that took years to establish will likely cause substantial disruption to illegal data trading activities.
This operation also demonstrates the growing capabilities of French law enforcement in combating sophisticated cybercrime, particularly as the country prepares to host major international events requiring enhanced cybersecurity measures.
The investigation continues as authorities work to identify additional victims and assess the full scope of the criminal network’s activities.
Find this Story Interesting! Follow us on LinkedIn and X to Get More Instant Updates.
.webp?w=356&resize=356,220&ssl=1 "Microsoft Teams Blocking Users from Accessing Embedded Office Documents")
