BreachForums Seized (Yes, Again)

According to ShinyHunters, BreachForums was seized by the FBI and international partners today, with all their domains taken and the era of forums declared over. The seized domain, breachforums[.]hn, had moved from a forum model to a leake and extortion portal tied to a Salesforce-focused campaign against its corporate customers. Victims reportedly included Qantas, Disney, McDonald’s, UPS, and other large firms targeted by the group’s social engineering campaign.

A Telegram post warned that data from non-paying victims would be released at 11:59 PM New York time on 10 October 2025, described as a “Doomsday” deadline. The clearnet site is down, though the onion site remains active, and the group’s PGP-signed statement acknowledged the seizure and that servers and backups were destroyed, while claiming database archives and escrow data from as far back as 2023 were compromised.

The seizure marks another chapter in BreachForums’ history as a recurring target in the long, cat-and-mouse dynamic between cybercrime networks and law enforcement.