BreachForums did not stop with Ticketmaster. Simultaneously, the same actors listed for sale the data of for a staggering $2 million. The data included customer account information and employee HR details. These high-profile posts demonstrated that despite—or perhaps because of—the relentless law enforcement pressure, the cybercrime ecosystem had become more daring than ever. In one of the most high-profile supply chain attacks of the year, the TeamPCP hacking group used the forum in 2026 to list the source code and internal data stolen from approximately 3,800 internal GitHub repositories , offering the haul for sale for a minimum of $50,000.
By understanding the rise and fall of BreachForums, we can better navigate the complex world of cybercrime and the dark web. As the online landscape continues to evolve, it's essential to stay informed and vigilant in the face of emerging threats.
However, the party eventually came to an end. In March 2022, the Federal Bureau of Investigation (FBI) arrested the alleged creator of BreachForums, a 20-year-old individual from the United States. The arrest marked the beginning of the end for the notorious forum. BreachForums
For years, BreachForums had served as a secure (in its own mind) sanctuary for hackers to sell the secrets of others. In a final, deeply ironic twist, the forum's own data was turned against it. In what the cybersecurity world dubbed the BreachForums platform itself suffered a catastrophic data breach.
BreachForums offered a range of features that contributed to its success: BreachForums did not stop with Ticketmaster
The downfall of BreachForums was a result of a coordinated effort between law enforcement agencies and cybersecurity experts. In March 2022, the FBI, along with other international authorities, seized the platform's infrastructure and arrested several key administrators. The site's domains were taken down, and its assets were seized.
The legal future of its founder is also now sealed. In September 2025, following an appeal by the Department of Justice, Conor Brian Fitzpatrick was resentenced to three years in federal prison after his initial sentence of time-served and 20 years of supervised release was deemed insufficient by the U.S. Court of Appeals. In a separate novel legal development, Fitzpatrick was also forced to forfeit nearly $700,000 to a health insurance company whose data was sold on his forum, marking the first time a threat actor has been named in a civil lawsuit for damages stemming from a data breach. As the online landscape continues to evolve, it's
BreachForums was a dark web marketplace that allowed users to buy and sell a wide range of illicit goods and services. Launched in 2020, the platform quickly gained popularity among cybercrime enthusiasts, hackers, and individuals looking to purchase stolen data. The site's primary focus was on facilitating the trade of breached data, including sensitive information such as credit card numbers, login credentials, and personal identifiable information (PII).