DOJ Resentences BreachForums Founder to 3 Years for Cybercrime and Possession of CSAM

According to U.S. Attorney Erik S. Siebert for the Eastern District of Virginia, the U.S. Department of Justice has resentenced Conor Brian Fitzpatrick (aka Pompompurin), the former administrator of BreachForums, to three years in prison for his role in running the cybercrime forum and possessing child sexual abuse material. Fitzpatrick, 22, of Peekskill, New York, pleaded guilty to one count of access device conspiracy, one count of access device solicitation, and one count of possession of CSAM.

He was initially arrested in March 2023 and pleaded guilty later that July; as part of the plea, he agreed to forfeit over 100 domain names used in BreachForums, more than a dozen electronic devices, and cryptocurrency representing illicit proceeds. The case follows a January 2025 Fourth Circuit decision vacating a prior 17-day sentence and remanding for resentencing; Fitzpatrick had previously been sentenced in January 2024 to time served with 20 years of supervised release. BreachForums, launched in March 2022, is described as a criminal marketplace with peaks of about 330,000 members and more than 14 billion records.