French authorities have arrested five individuals believed to be operators of the notorious BreachForums hacking forum, a major online marketplace for trading and leaking stolen data. The arrests were carried out by the cybercrime unit (BL2C) of the Paris police department on June 23, 2025, with simultaneous raids conducted in the regions of Hauts-de-Seine (Paris), Seine-Maritime (Normandy), and Réunion (overseas).
BreachForums, often referred to as Breached, is a notorious English-language cybercrime forum that emerged as a successor to RaidForums after its shutdown and seizure by law enforcement in early 2022.
Identities of Those Arrested
The individuals arrested (all in their twenties) are known online by their handles:
• IntelBroker
• ShinyHunters
• Hollow
• Noct
• Depressed
Notably, IntelBroker was reportedly apprehended earlier, in February 2025, though this information had not been publicly disclosed until now.
Background and Impact
BreachForums has long been a hub for cybercriminals, facilitating the sale and distribution of stolen data and access to compromised corporate networks. The original BreachForums was shut down in March 2023 after the arrest of its founder, Conor Brian Fitzpatrick, by US law enforcement. Fitzpatrick was later sentenced to 20 years of supervised release. Following the initial shutdown, the forum was revived under new leadership, first by the hacking group ShinyHunters and later by other threat actors such as IntelBroker and “Anastasia”.
The arrested operators are believed to be linked to high-profile breaches affecting organizations such as Capgemini, Accor, the French Ministry of National Education, and LVMH. There is also speculation that the group Scattered Spider may have been involved in the LVMH breach.
Significance of the Arrests
These arrests mark a significant blow to the cybercriminal underground, disrupting one of the most prominent platforms for the exchange of stolen data. The forum had already been weakened by previous law enforcement actions, including FBI seizures and the arrest of earlier administrators. The recent crackdown by French authorities further diminishes the operational capacity of BreachForums and sends a strong message to similar illicit marketplaces.
