Global operation takes down hackers’ leaked data market
WASHINGTON – Western law enforcement agencies dismantled an online marketplace used to buy and sell hacked and stolen personal data belonging to millions of people, and charged the platform’s founder and chief administrator, officials announced Tuesday.
Authorities say the RaidForums website trafficked in hundreds of databases of sensitive data, including credit card and Social Security numbers and bank account information, that had been hacked or stolen from victims.
In addition to seizing three domains that hosted the website, officials have also arrested Diogo Santos, 21, of Coelho of Portugal, who prosecutors say controlled and administered the platform between 2015 and this past January, when he was taken into custody in the United Kingdom. The U.S. is seeking his extradition to federal court in Alexandria, Virginia, on charges including conspiracy, access device fraud and aggravated identify.
“The takedown of this online market for the resale of hacked or stolen data disrupts one of the major ways cybercriminals profit from the largescale theft of sensitive personal and financial information,” said Assistant Attorney General Kenneth A. Polite, Jr., head of the Justice Department’s criminal division, said in a statement.
The site offered special access and features for members willing to pay and enabled members to earn credits through means that included posting instructions on how to commit illegal acts, officials said.
“Disruption has always been a key technique in operating against threat actors online, so targeting forums that host huge amounts of stolen data keeps criminals on their toes,” said Edvardas Šileris, head of Europol’s European Cybercrime Centre.