Authorities Dismantle BreachForums’ Reemerged Clearnet Marketplace

In a coordinated action, international law enforcement agencies seized the clearnet domain breachforums.[.]hn, effectively shutting down another incarnation of the BreachForums marketplace. The seizure notice on the domain appeared alongside the U.S. Department of Justice (DOJ) and the Federal Bureau of Investigation (FBI), and involved French authorities, including the Brigade de Lutte Contre la Cybercriminalité (BL2C) and the Parquet de Paris (JUNALCO).

The operation marks the latest chapter in a long‑running campaign to dismantle the data‑leak site, which first surfaced in August 2025 as BreachForums’ new home. Investigators note that this version served as a clearnet outlet for the hacking alliance known as the “Trinity of Chaos” or “Scattered Lapsus$ Hunters,” a group blending members of Scattered Spider, Lapsus$, and ShinyHunters.

Past disruptions have included the 2022 shutdown of RaidForums and the 2024 seizure that led to another rebirth, with four French individuals charged in June 2025. said to remain active on the dark web, authorities warn that the threat persists and will require ongoing cross‑border vigilance.