2025年10月，在ShinyHunters的控制下，BreachForums 被用作一个全球勒索门户，劫持了云计算巨头Salesforce的超大量级客户数据，对多家全球500强企业发出威胁。然而，就在勒索者设定的“数据公开倒计时”归零之前，FBI再次出手，在2025年10月9日联合法国当局查封了BreachForums的所有公开域名。
In March 2022, BreachForums was seized by law enforcement agencies, and its infrastructure was dismantled. The site's administrator, known as "BreachForums Admin," was arrested, and several other key members were identified. The seizure marked a significant victory for law enforcement and cybersecurity experts, who had been working to disrupt the platform's operations for months.
Perhaps the most ambitious campaign linked to BreachForums was the extortion of Salesforce customers. A collective known as "Scattered Lapsus$ Hunters," comprised of ShinyHunters and Scattered Spider, claimed to have stolen approximately one billion customer records from Salesforce. Using sophisticated vishing and social engineering attacks, the group gained access to massive datasets belonging to major corporations including . The stolen data was held for ransom, with a deadline of October 10, 2025, posted on BreachForums for the world to see. BreachForums
BreachForums 保留了前身最核心的“商业模式”——售卖数据。这里的“商品”琳琅满目，包括数以亿计公民的个人身份信息（PII）、各类网站的登录凭证、银行卡数据，甚至包括对全球数千家企业后台的直接访问权限。
BreachForums was a shadowy online marketplace that operated on the dark web, a part of the internet accessible only through specialized software. The platform allowed users to anonymously create accounts, buy, and sell a wide range of illicit goods and services, including: Perhaps the most ambitious campaign linked to BreachForums
The forum's history is marked by a cycle of shutdowns and revivals:
For years, BreachForums had served as a secure (in its own mind) sanctuary for hackers to sell the secrets of others. In a final, deeply ironic twist, the forum's own data was turned against it. In what the cybersecurity world dubbed the BreachForums platform itself suffered a catastrophic data breach. The stolen data was held for ransom, with
Law enforcement agencies and cybersecurity experts are actively working to disrupt and dismantle BreachForums. Some of the efforts include: