Breachforum [patched] -

"This seizure is part of an ongoing investigation into the sale of stolen personal data. The FBI is reviewing the site’s backend logs."

BreachForums, sometimes referred to simply as "Breached," is an English-language black hat hacking crime forum that emerged in March 2022 following the seizure of its predecessor, RaidForums. Unlike anonymous hidden services that require specialized software, BreachForums was accessible via both the dark web (Tor) and the clearnet (standard internet), significantly lowering the barrier to entry for aspiring cybercriminals.

Note: this post discusses an online forum associated with data breaches, criminal marketplaces, and the trade in leaked personal information. It focuses on factual context, operational methods, and broader impacts rather than glorifying wrongdoing. breachforum

. Over its volatile history, it has become a central hub for hackers to trade stolen databases, hacking tools, and personal identifying information (PII). Dark Reading Key Developments and Law Enforcement Actions

Immediately following the seizure, the cybercriminal community fractured. Three distinct successors attempted to claim the throne: "This seizure is part of an ongoing investigation

As she traces the attack’s origin, Mara discovers BioMed’s security lapse—a single employee fell for a spear-phishing scam. She alerts the company, but executives demand silence, fearing reputational damage. Desperate to prevent the data from causing harm, Mara partners with a gruff but loyal former hacker, Jax, now turned white-hat. Together, they plan an infiltration: Jax will pose as a buyer, while Mara prepares to disrupt the transaction by injecting malware into Phantom’s system to trace him.

Among the most notable leaks facilitated through the forum was data affecting millions of Twitter users and a high-profile breach of DC Health Link, the healthcare provider serving the U.S. Congress. Note: this post discusses an online forum associated

As BreachForums gained notoriety, law enforcement agencies and cybersecurity experts began to take notice. The platform's popularity made it an attractive target for takedowns and disruptions. In response, the site's administrators implemented various measures to evade detection, including:

Second, . Multiple iterations of BreachForums were suspected of being law enforcement honeypots—either actively run by authorities or thoroughly infiltrated by them. A member of ShinyHunters publicly claimed the forum was a police honeypot following the August 2025 shutdown.

The forum has been in a constant "tug-of-war" with authorities, leading to multiple shutdowns and re-emergences: