To understand BreachForums, one must first look at its predecessor. In early 2022, the FBI and international partners seized RaidForums, the reigning king of data leak sites. The vacuum left behind didn’t last long. Within weeks, a user known as "Pompompurin" (later identified as Conor Brian Fitzpatrick) launched BreachForums.
In the shadowy corners of the clear web—sitting just a few clicks away from standard search engines—lies a digital marketplace that has redefined modern cybercrime. (often stylized as Bforum) has become a household name in the cybersecurity world, serving as the primary successor to the infamous RaidForums and acting as a central clearinghouse for stolen databases, hacking tools, and illicit trade. The Genesis: Filling the RaidForums Vacuum
Hackers often dump small portions of stolen data for free to build "rep" (reputation) within the community. breachforum
Stolen PII is used to open fraudulent bank accounts.
Hackers take passwords leaked on BreachForums and try them on other sites like Netflix, Amazon, or your banking portal. The Future of the Digital Underground To understand BreachForums, one must first look at
Your email or phone number found in a leak is added to lists used for "smishing" (SMS phishing) and social engineering.
Massive databases containing millions of records—including PII (Personally Identifiable Information), credit card numbers, and login credentials—are auctioned off to the highest bidder, often for five or six figures in cryptocurrency. Within weeks, a user known as "Pompompurin" (later
The forum serves as a recruitment ground where individuals offer specialized services, from bypasses for Two-Factor Authentication (2FA) to custom malware development. High-Profile Scalps: The Impact of the Forum
BreachForums represents the democratization of cybercrime. It has lowered the barrier to entry, allowing anyone with a crypto wallet and a bit of technical savvy to participate in the data trade. As long as there is a profit motive for stealing data and a demand for illicit information, platforms like BreachForums—or their inevitable successors—will continue to thrive.
Cybercrime forums are notoriously difficult to kill permanently. Following Fitzpatrick's arrest, several "clones" and "successors" emerged, most notably the version led by an individual known as . Despite a major international law enforcement operation in May 2024—which resulted in the seizure of the .st and .cx domains—the forum has consistently managed to migrate to new domains or Telegram channels.
