A major international cybercrime marketplace has been shut down following a coordinated law enforcement operation. The forum, known as LeakBase, was used by criminals worldwide to trade stolen personal data, hacking tools, and other illicit materials.
The action was carried out by the U.S. Federal Bureau of Investigation (FBI) in conjunction with Europol and other international partners. Visitors to the LeakBase website are now met with a seizure notice, confirming the platform’s takedown by authorities.
Scale of the Criminal Operation
According to a statement from the U.S. Department of Justice, LeakBase was one of the largest forums of its kind. As of December 2025, it hosted over 142,000 registered members. These users exchanged more than 215,000 messages on the platform.
The forum operated on the clear web, accessible via a standard web browser at the address leakbase[.]la. Its public nature facilitated a high volume of transactions involving compromised credentials, sensitive databases, and software exploits.
International Cooperation in Cyber Policing
The seizure underscores the increasing focus on cross-border collaboration to combat cyber threats. Europol’s European Cybercrime Centre (EC3) played a key role in facilitating intelligence sharing and operational coordination among European member states involved in the investigation.
This joint effort reflects a growing strategy by law enforcement agencies to target the infrastructure that enables cybercrime, rather than pursuing individual hackers alone. Taking down a central marketplace disrupts the entire ecosystem for buying and selling stolen data.
Impact on Cybercrime Networks
The removal of LeakBase represents a significant disruption to the cybercriminal underground. Forums like these serve as critical hubs where threat actors source the tools and information needed for attacks, including ransomware campaigns, identity theft, and corporate espionage.
By seizing the domain, authorities have prevented ongoing transactions and compromised a trusted communication channel for criminals. The action also sends a deterrent message to similar platforms operating openly or in hidden corners of the internet.
Law enforcement agencies routinely monitor such forums to gather intelligence on emerging threats and identify key actors. The data seized from LeakBase’s servers is likely to fuel numerous ongoing investigations into data breaches and cyber attacks.
Ongoing Investigations and Future Actions
The seizure is typically the first public step in a broader legal process. Analysts expect the FBI and Europol to conduct a forensic analysis of the seized server data. This analysis aims to identify the forum’s administrators, its most prolific users, and the sources of the leaked data traded on the site.
Authorities have not yet announced any arrests directly linked to this takedown. However, historical precedents suggest that such operations often lead to indictments and arrests in the following months as evidence is compiled.
The global nature of the forum means legal proceedings could unfold in multiple jurisdictions. International law enforcement cooperation will be essential for pursuing cases against individuals located in different countries.
cybersecurity experts anticipate that the void left by LeakBase may be temporary, with users migrating to other existing platforms or attempting to establish new ones. The long-term effectiveness of such takedowns depends on sustained pressure and the prosecution of those who operate and heavily utilize these markets.
Source: U.S. Department of Justice
