Podcasts
Hacking Forums
BreachForums
Active Since
March 2022
Dark web or Clear web
Dark web and clear web
Predominant Language
English
Known admins / moderators
Baphomet, ShinyHunters, Manitora, dedale
BreachForums is the successor to RaidForums, a site that was seized in operation “TOURNIQUET” in a complex law enforcement effort that led to the forum’s administrator and two of his accomplices being arrested.
Like its predecessor, BreachForums specializes in trading leaked databases and other cybercrime, with its users sharing exploits, tips, and tools. Also like RaidForums, BreachForums has run into trouble with law enforcement.
The forum was temporarily shut down in March 2023 following the arrest of one of its administrators, Conor Brian Fitzpatrick (alias pompompurin). Another one of the forum’s operators, alias Baphomet, quickly started to signal that the forum would continue in some form and in June 2023 the forum re-emerged. While its new iteration is mostly staffed by veteran BreachForums administrators and moderators, one notable difference is ownership of the forum belonging to ShinyHunters, a hacking collective responsible for numerous high-profile breaches since 2020 including Tokopedia, Wattpad, and Animal Jam.
After an initial difficult period (including database theft and leak by rival forum, suspicion of being a fed honeypot, and unreliable uptime) the latest iteration of BreachForums has now reclaimed its position as the top forum for leaked database trading. Much of the userbase has turned against the previous administrator pompompurin after the charges against him included child pornography possession.
update may 2024
Once again, BreachForums has gone through a cycle of disappearing and re-appearing. On Wednesday May 15, popular hacking and data leaks forum was seized by the FBI. The site’s clear web and dark web domains showed a seizure notice, and its Telegram groups displayed a message warning that they were now under the control of the FBI.
However, just two weeks later the forum returned, with its admins regaining control of its clear web domain and starting a new dark web site. One of the admins of the forum, ShinyHunters, has since posted an advertisement on the forum for an alleged database of 560m Ticketmaster customers – including names, addresses, emails, and phone numbers, and details from ticket sales. Some experts have speculated that the dataset (being sold for $500k) may be a PR stunt to boost the forum as it tries to revive its reputation.
Related Content
Knowledge Base
XSS
Originally known as DaMaGeLaB, XSS is one of the longest-running dark web forums. Its new name is a reference to the well known cross-site scripting web app vulnerability.
Knowledge Base
Exploit
Exploit is an extremely long-running Russian cybercrime forum. Exploit and other Russian forums tend to view themselves as more professional than other dark web communities.
Knowledge Base
RuTor
RuTor has been a prominent forum in the Russian dark web scene since 2015, with threads that span multiple pages - and years - on topics ranging from drugs, fraud, computer programming and current affairs.
Knowledge Base
LeakBase
LeakBase is a relative newcomer that gained popularity during the period of BreachForum disruption as an alternative source of hacked or leaked databases.
Knowledge Base
Dread
Dread is a dark web forum that was born out of Reddit’s clampdown on discussions around dark web markets. It is popular among dark web netizens involved in the market scene or interested in cybercrime.
Knowledge Base
Cracked
Cracked is a clear web hacking forum that takes its name from the act of “cracking”, slang for breaking into accounts or software.
