January 31st, 2022 - Omnipotent, the administrator of RaidForums is arrested after travelling to the UK to visit his mother who was dying due to cancer.
March 16th, 2022 - Pompompurin launches BreachForum to replace the now Defunct RaidForums.
March, 2022 - An unnamed man connected to the operation of RaidForums is arrested in Croydon, United Kingdom. The NCA seized £5,000 in cash, and an undisclosed amount of US dollars, and froze cryptocurrency assets worth more than $500,000. The unnamed individual has since been released under investigation. This man is speculated to be one of the administrators Jaw or Moot. (https://www.computerweekly.com/news/252515871/Multiple-arrests-made-in-RaidForums-takedown)
April 12th, 2022 - RaidForums is official seized by the FBI, Omnipotent is indicted with six criminal counts, including conspiracy, access device fraud and aggravated identity theft. (https://i.suffer.rip/LC6PXYEX.pdf)
July 2nd, 2022 - Pompompurin middleman's a transaction between forum member 'jigsaw' and a FBI online covert employee (OCE) 'Cr4ck4'. Cr4ck4 purchases a database "expo2020" from jigsaw using pom's middleman service.
November, 2022 - RaidForums member "DataBox" is arrested. (https://databreaches.net/2023/06/19/former-raidforums-member-databox-sentenced-to-prison/)
November 29th, 2022 - The last breached database backup that was available to pompompurin is generated, it is unclear if the FBI have access to later snapshots of the breached database. Note that it is this backup that was attempted to be sold by 'breached_db_person'.
January, 2023 - Umbreon a notorious hacker from RaidForums and BreachForum is arrested in the Netherlands.
March 6th, 2023 - DC Health Link, a health insurance company that provides coverage to members of congress is breached by IntelBroker, the data is put up for sale on Breached.
March 8th, 20203 - Cr4ck4 purchases the DC Health Link database. Later a letter sent from Kevin McCarthy and Hakeem Jefferies to the executive director of DC Health Link "Ms. Mila Kofman" reveals that the FBI had purchased the DC Health Link database from IntelBroker. This unintentionally exposes Cr4ck4 as a FBI OCE. (https://i.suffer.rip/wrojOWqR.pdf)
March 9th, 2023 - Forum member Denfur leaks the DC Health Link database.
March 14th, 2023 - ViLE a hacking/doxing group owned by the admin of DoxBin 'kt' has two members indicted for breaching a DEA online portal and attempting to use a Bangladeshi LE email to send a fake EDR to ToonTown Rewritten. In the criminal complaint 'kt' is listed as a criminal conspirator and DoxBin is stated to be platform used for extortion. "Victims are extorted into paying CC-1 (kt) to have their information removed from Forum-1 (DoxBin)". (https://i.suffer.rip/p8AVs9SC.pdf)
March 15th, 2023 - Pompompurin is arrested in New York and is charged with conspiracy to commit access device fraud. (https://i.suffer.rip/wBa9exri.pdf)
March 16th, 2023 - Baphomet after noticing pom's unusual absence restricts his access to the forum and backend servers. Later in the day the case against pom is unsealed.
March 21st, 2023 - Baphomet, the only other administrator of BreachForum decides to shutdown the forum. (https://web.archive.org/web/20230329203357/https://baph.is/updates/finalupdate.txt.asc)
March 22nd, 2023 - Baphomet releases an update stating "Again, the Breached forum will not be coming back. If it's back for any reason, you need to assume that is an attempt to target our users and is not safe" (https://web.archive.org/web/20230613170647/https://baph.is/updates/safe.txt.asc)
June 12th, 2023 - BreachForum 2.0 launches, now administered by ShinyHunters.
June 12th, 2023 - A message appears on the old BreachForum 1.0 domains warning users that Breached will never return and to use any forums claiming to be breached with caution. (https://web.archive.org/web/20230612202650/https://breached.vc/)
June 16th, 2023 - Baphomet reneges on his previous statement that Breached would not be returning and states that the group leaving messages on the domain are a "group who glows". (https://web.archive.org/web/20230616174047/https://baph.is/updates/safest.txt.asc)
June 17th, 2023 - BreachForum 2.0 suffers a data breach. The user table is dumped to weebroot as dump.sql and is discovered by an affiliate of a rival hacking forum 'Onniforums', members of Onniforums use the data to hijack BreachForum member accounts to promote their forum. ShinyHunters states the cause of the leak was a misconfigured backup script.
June 23rd, 2023 - The original BreachForum 1.0 domains and other domains owned by Pompompurin are seized by the FBI.
July 10th, 2023 - Pompompurin signs a plea deal agreeing to plead guilty to the charges of conspiracy to commit access device fraud, solicitation for the purpose of offering access devices and possession of child pornography. (https://i.suffer.rip/b3Hgb4cH.pdf)
July 26th, 2023 - The BreachForum 1.0 database is submitted whole to Troy Hunt of Have I Been Pwned with the source being attributed to "breached_db_person". A thread selling the BreachForum 1.0 database is created on the forum, breached_db_person begins leaking prominent members records from the user table.
January 3rd, 2024 - Pompompurin is arrested for violating his bond agreement. "In addition, as previously detailed, the Government received information from a messaging
and social media platform indicating that the defendant was engaged in a sustained pattern of violations of his bond conditions even after entering a guilty plea in this case". (https://i.suffer.rip/Li14Bb9r.pdf)
January 16th, 2024 - The United States recommends to the court that Pompompurin should receive a sentence of 188 months imprisonment. (https://i.suffer.rip/Li14Bb9r.pdf)
January 19th, 2024 - Pompompurin is sentenced to 2 years of house arrest and 20 years of supervised release. (https://i.suffer.rip/cGSaKOAj.pdf)
April 24th, 2024 - An unsealed court transcript reveals pompompurin has agreed to assist the FBI in arresting forum members and co-conspirators (breached staff). (https://i.suffer.rip/rR94aMbj.pdf)
May 15th, 2024 - DoxBin's administrator 'Operator' is claimed to be kidnapped. Several videos of a man claimed to be Operator being beaten are published to Telegram, including one of the alleged kidnappers accessing DoxBin through Operator's account.
May 15th, 2024 - BreachForum 2.0's backend at VSYS is seized by the FBI. The FBI states they are reviewing the sites backend data. Baphomet an admin of both iterations of BreachForum is arrested and has his Telegram account is then hijacked by law enforcement.
March 16th, 2022 - Pompompurin launches BreachForum to replace the now Defunct RaidForums.
March, 2022 - An unnamed man connected to the operation of RaidForums is arrested in Croydon, United Kingdom. The NCA seized £5,000 in cash, and an undisclosed amount of US dollars, and froze cryptocurrency assets worth more than $500,000. The unnamed individual has since been released under investigation. This man is speculated to be one of the administrators Jaw or Moot. (https://www.computerweekly.com/news/252515871/Multiple-arrests-made-in-RaidForums-takedown)
April 12th, 2022 - RaidForums is official seized by the FBI, Omnipotent is indicted with six criminal counts, including conspiracy, access device fraud and aggravated identity theft. (https://i.suffer.rip/LC6PXYEX.pdf)
July 2nd, 2022 - Pompompurin middleman's a transaction between forum member 'jigsaw' and a FBI online covert employee (OCE) 'Cr4ck4'. Cr4ck4 purchases a database "expo2020" from jigsaw using pom's middleman service.
November, 2022 - RaidForums member "DataBox" is arrested. (https://databreaches.net/2023/06/19/former-raidforums-member-databox-sentenced-to-prison/)
November 29th, 2022 - The last breached database backup that was available to pompompurin is generated, it is unclear if the FBI have access to later snapshots of the breached database. Note that it is this backup that was attempted to be sold by 'breached_db_person'.
January, 2023 - Umbreon a notorious hacker from RaidForums and BreachForum is arrested in the Netherlands.
March 6th, 2023 - DC Health Link, a health insurance company that provides coverage to members of congress is breached by IntelBroker, the data is put up for sale on Breached.
March 8th, 20203 - Cr4ck4 purchases the DC Health Link database. Later a letter sent from Kevin McCarthy and Hakeem Jefferies to the executive director of DC Health Link "Ms. Mila Kofman" reveals that the FBI had purchased the DC Health Link database from IntelBroker. This unintentionally exposes Cr4ck4 as a FBI OCE. (https://i.suffer.rip/wrojOWqR.pdf)
March 9th, 2023 - Forum member Denfur leaks the DC Health Link database.
March 14th, 2023 - ViLE a hacking/doxing group owned by the admin of DoxBin 'kt' has two members indicted for breaching a DEA online portal and attempting to use a Bangladeshi LE email to send a fake EDR to ToonTown Rewritten. In the criminal complaint 'kt' is listed as a criminal conspirator and DoxBin is stated to be platform used for extortion. "Victims are extorted into paying CC-1 (kt) to have their information removed from Forum-1 (DoxBin)". (https://i.suffer.rip/p8AVs9SC.pdf)
March 15th, 2023 - Pompompurin is arrested in New York and is charged with conspiracy to commit access device fraud. (https://i.suffer.rip/wBa9exri.pdf)
March 16th, 2023 - Baphomet after noticing pom's unusual absence restricts his access to the forum and backend servers. Later in the day the case against pom is unsealed.
March 21st, 2023 - Baphomet, the only other administrator of BreachForum decides to shutdown the forum. (https://web.archive.org/web/20230329203357/https://baph.is/updates/finalupdate.txt.asc)
March 22nd, 2023 - Baphomet releases an update stating "Again, the Breached forum will not be coming back. If it's back for any reason, you need to assume that is an attempt to target our users and is not safe" (https://web.archive.org/web/20230613170647/https://baph.is/updates/safe.txt.asc)
June 12th, 2023 - BreachForum 2.0 launches, now administered by ShinyHunters.
June 12th, 2023 - A message appears on the old BreachForum 1.0 domains warning users that Breached will never return and to use any forums claiming to be breached with caution. (https://web.archive.org/web/20230612202650/https://breached.vc/)
June 16th, 2023 - Baphomet reneges on his previous statement that Breached would not be returning and states that the group leaving messages on the domain are a "group who glows". (https://web.archive.org/web/20230616174047/https://baph.is/updates/safest.txt.asc)
June 17th, 2023 - BreachForum 2.0 suffers a data breach. The user table is dumped to weebroot as dump.sql and is discovered by an affiliate of a rival hacking forum 'Onniforums', members of Onniforums use the data to hijack BreachForum member accounts to promote their forum. ShinyHunters states the cause of the leak was a misconfigured backup script.
June 23rd, 2023 - The original BreachForum 1.0 domains and other domains owned by Pompompurin are seized by the FBI.
July 10th, 2023 - Pompompurin signs a plea deal agreeing to plead guilty to the charges of conspiracy to commit access device fraud, solicitation for the purpose of offering access devices and possession of child pornography. (https://i.suffer.rip/b3Hgb4cH.pdf)
July 26th, 2023 - The BreachForum 1.0 database is submitted whole to Troy Hunt of Have I Been Pwned with the source being attributed to "breached_db_person". A thread selling the BreachForum 1.0 database is created on the forum, breached_db_person begins leaking prominent members records from the user table.
January 3rd, 2024 - Pompompurin is arrested for violating his bond agreement. "In addition, as previously detailed, the Government received information from a messaging
and social media platform indicating that the defendant was engaged in a sustained pattern of violations of his bond conditions even after entering a guilty plea in this case". (https://i.suffer.rip/Li14Bb9r.pdf)
January 16th, 2024 - The United States recommends to the court that Pompompurin should receive a sentence of 188 months imprisonment. (https://i.suffer.rip/Li14Bb9r.pdf)
January 19th, 2024 - Pompompurin is sentenced to 2 years of house arrest and 20 years of supervised release. (https://i.suffer.rip/cGSaKOAj.pdf)
April 24th, 2024 - An unsealed court transcript reveals pompompurin has agreed to assist the FBI in arresting forum members and co-conspirators (breached staff). (https://i.suffer.rip/rR94aMbj.pdf)
May 15th, 2024 - DoxBin's administrator 'Operator' is claimed to be kidnapped. Several videos of a man claimed to be Operator being beaten are published to Telegram, including one of the alleged kidnappers accessing DoxBin through Operator's account.
May 15th, 2024 - BreachForum 2.0's backend at VSYS is seized by the FBI. The FBI states they are reviewing the sites backend data. Baphomet an admin of both iterations of BreachForum is arrested and has his Telegram account is then hijacked by law enforcement.