{"table":"takedown_organizations","columns":["takedown_reference_id","takedown_slug","organization_reference_id","organization_slug","role","role_description"],"row_count":310,"research_cutoff_on":"2026-08-21","generated_on":"2026-08-21","terms":"Free to reuse with attribution to the Internet Takedown Index. A research aggregation of public reporting, not a legal reference.","rows":[{"takedown_reference_id":"td_2013_silk_road","takedown_slug":"silk-road-seizure","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the investigation, executed the server and hidden-service seizure, and arrested the founder."},{"takedown_reference_id":"td_2013_silk_road","takedown_slug":"silk-road-seizure","organization_reference_id":"org_us_usao_sdny","organization_slug":"united-states-attorney-s-office-for-the-southern-district-of-new-york","role":"prosecuting","role_description":"Charged and prosecuted Ross Ulbricht."},{"takedown_reference_id":"td_2013_silk_road","takedown_slug":"silk-road-seizure","organization_reference_id":"org_us_dea","organization_slug":"drug-enforcement-administration","role":"investigating","role_description":"Participated in the narcotics investigation."},{"takedown_reference_id":"td_2013_silk_road","takedown_slug":"silk-road-seizure","organization_reference_id":"org_us_irs_ci","organization_slug":"internal-revenue-service-criminal-investigation","role":"financial_tracing","role_description":"Conducted financial and cryptocurrency tracing."},{"takedown_reference_id":"td_2014_operation_onymous","takedown_slug":"operation-onymous","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"co_lead","role_description":"Led the US component including the Silk Road 2.0 seizure."},{"takedown_reference_id":"td_2014_operation_onymous","takedown_slug":"operation-onymous","organization_reference_id":"org_eu_europol_ec3","organization_slug":"european-cybercrime-centre","role":"coordinator","role_description":"Coordinated the European component from its operational coordination centre."},{"takedown_reference_id":"td_2014_operation_onymous","takedown_slug":"operation-onymous","organization_reference_id":"org_eu_eurojust","organization_slug":"european-union-agency-for-criminal-justice-cooperation","role":"judicial","role_description":"Supported judicial coordination across participating states."},{"takedown_reference_id":"td_2014_operation_onymous","takedown_slug":"operation-onymous","organization_reference_id":"org_us_usao_sdny","organization_slug":"united-states-attorney-s-office-for-the-southern-district-of-new-york","role":"charging","role_description":"Filed charges against Blake Benthall."},{"takedown_reference_id":"td_2017_alphabay","takedown_slug":"alphabay-seizure","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the investigation and the seizure of AlphaBay infrastructure."},{"takedown_reference_id":"td_2017_alphabay","takedown_slug":"alphabay-seizure","organization_reference_id":"org_us_dea","organization_slug":"drug-enforcement-administration","role":"co_lead","role_description":"Co-led the narcotics investigation."},{"takedown_reference_id":"td_2017_alphabay","takedown_slug":"alphabay-seizure","organization_reference_id":"org_th_rtp","organization_slug":"royal-thai-police","role":"arresting","role_description":"Physically arrested Alexandre Cazes in Bangkok at US request."},{"takedown_reference_id":"td_2017_alphabay","takedown_slug":"alphabay-seizure","organization_reference_id":"org_us_usao_edca","organization_slug":"united-states-attorney-s-office-for-the-eastern-district-of-california","role":"charging","role_description":"Filed the indictment against Cazes."},{"takedown_reference_id":"td_2017_alphabay","takedown_slug":"alphabay-seizure","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated international elements of the joint operation."},{"takedown_reference_id":"td_2017_hansa","takedown_slug":"hansa-covert-takeover-and-shutdown","organization_reference_id":"org_nl_politie","organization_slug":"politie-netherlands-national-police","role":"lead","role_description":"Covertly assumed control of and operated the marketplace, then shut it down."},{"takedown_reference_id":"td_2017_hansa","takedown_slug":"hansa-covert-takeover-and-shutdown","organization_reference_id":"org_nl_om","organization_slug":"openbaar-ministerie-netherlands-public-prosecution-service","role":"judicial","role_description":"Authorized covert continuation of the criminal service under Dutch law."},{"takedown_reference_id":"td_2017_hansa","takedown_slug":"hansa-covert-takeover-and-shutdown","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the joint operation with the parallel AlphaBay action."},{"takedown_reference_id":"td_2017_hansa","takedown_slug":"hansa-covert-takeover-and-shutdown","organization_reference_id":"org_priv_bitdefender","organization_slug":"bitdefender","role":"technical_partner","role_description":"Provided technical advisory support to Europol EC3."},{"takedown_reference_id":"td_2022_hydra","takedown_slug":"hydra-market-server-seizure","organization_reference_id":"org_de_bka","organization_slug":"bundeskriminalamt","role":"lead","role_description":"Executed the seizure of the German-hosted server infrastructure and cryptocurrency."},{"takedown_reference_id":"td_2022_hydra","takedown_slug":"hydra-market-server-seizure","organization_reference_id":"org_de_zit","organization_slug":"zentralstelle-zur-bekampfung-der-internetkriminalitat-generalstaatsanwaltschaft-","role":"prosecuting","role_description":"Directed the German investigation and obtained the seizure orders."},{"takedown_reference_id":"td_2022_hydra","takedown_slug":"hydra-market-server-seizure","organization_reference_id":"org_us_doj","organization_slug":"united-states-department-of-justice","role":"charging","role_description":"Filed the indictment against Dmitry Pavlov."},{"takedown_reference_id":"td_2022_hydra","takedown_slug":"hydra-market-server-seizure","organization_reference_id":"org_us_treasury_ofac","organization_slug":"office-of-foreign-assets-control-united-states-department-of-the-treasury","role":"other","role_description":"Designated Hydra and Garantex under sanctions on the same date. Recorded as a parallel action, not part of the infrastructure seizure."},{"takedown_reference_id":"td_2025_archetyp","takedown_slug":"operation-deep-sentinel","organization_reference_id":"org_de_bka","organization_slug":"bundeskriminalamt","role":"lead","role_description":"Led the international investigation and operation."},{"takedown_reference_id":"td_2025_archetyp","takedown_slug":"operation-deep-sentinel","organization_reference_id":"org_de_zit","organization_slug":"zentralstelle-zur-bekampfung-der-internetkriminalitat-generalstaatsanwaltschaft-","role":"prosecuting","role_description":"Directed the German prosecution."},{"takedown_reference_id":"td_2025_archetyp","takedown_slug":"operation-deep-sentinel","organization_reference_id":"org_nl_politie","organization_slug":"politie-netherlands-national-police","role":"infrastructure_seizing","role_description":"Seized the marketplace server infrastructure."},{"takedown_reference_id":"td_2025_archetyp","takedown_slug":"operation-deep-sentinel","organization_reference_id":"org_es_policia_nacional","organization_slug":"policia-nacional","role":"arresting","role_description":"Arrested the administrator in Barcelona."},{"takedown_reference_id":"td_2025_archetyp","takedown_slug":"operation-deep-sentinel","organization_reference_id":"org_se_police","organization_slug":"polismyndigheten","role":"arresting","role_description":"Arrested vendors in Sweden."},{"takedown_reference_id":"td_2025_archetyp","takedown_slug":"operation-deep-sentinel","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the multinational operation and provided analytical support."},{"takedown_reference_id":"td_2025_archetyp","takedown_slug":"operation-deep-sentinel","organization_reference_id":"org_eu_eurojust","organization_slug":"european-union-agency-for-criminal-justice-cooperation","role":"judicial","role_description":"Supported cross-border judicial cooperation."},{"takedown_reference_id":"td_2022_raidforums","takedown_slug":"operation-tourniquet","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the investigation and executed the domain seizures."},{"takedown_reference_id":"td_2022_raidforums","takedown_slug":"operation-tourniquet","organization_reference_id":"org_us_usss","organization_slug":"united-states-secret-service","role":"investigating","role_description":"Participated in the investigation."},{"takedown_reference_id":"td_2022_raidforums","takedown_slug":"operation-tourniquet","organization_reference_id":"org_us_usao_edva","organization_slug":"united-states-attorney-s-office-for-the-eastern-district-of-virginia","role":"charging","role_description":"Filed the six-count indictment against Diogo Santos Coelho."},{"takedown_reference_id":"td_2022_raidforums","takedown_slug":"operation-tourniquet","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated Operation Tourniquet across participating countries."},{"takedown_reference_id":"td_2022_raidforums","takedown_slug":"operation-tourniquet","organization_reference_id":"org_gb_nca","organization_slug":"national-crime-agency","role":"arresting","role_description":"Arrested Coelho in the United Kingdom at US request."},{"takedown_reference_id":"td_2023_genesis","takedown_slug":"operation-cookie-monster","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"co_lead","role_description":"Led the US component and executed the domain seizures."},{"takedown_reference_id":"td_2023_genesis","takedown_slug":"operation-cookie-monster","organization_reference_id":"org_nl_politie","organization_slug":"politie-netherlands-national-police","role":"co_lead","role_description":"Co-led the international operation."},{"takedown_reference_id":"td_2023_genesis","takedown_slug":"operation-cookie-monster","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the 17-country action and hosted the operational centre."},{"takedown_reference_id":"td_2023_genesis","takedown_slug":"operation-cookie-monster","organization_reference_id":"org_gb_nca","organization_slug":"national-crime-agency","role":"supporting","role_description":"Executed UK arrests and searches."},{"takedown_reference_id":"td_2023_genesis","takedown_slug":"operation-cookie-monster","organization_reference_id":"org_priv_qintel","organization_slug":"qintel","role":"technical_partner","role_description":"Provided technical analysis supporting the investigation."},{"takedown_reference_id":"td_2023_breachforums","takedown_slug":"breachforums-shutdown-following-administrator-arrest","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Arrested the administrator and seized his devices and accounts."},{"takedown_reference_id":"td_2023_breachforums","takedown_slug":"breachforums-shutdown-following-administrator-arrest","organization_reference_id":"org_us_usao_edva","organization_slug":"united-states-attorney-s-office-for-the-eastern-district-of-virginia","role":"charging","role_description":"Filed the criminal complaint."},{"takedown_reference_id":"td_2024_breachforums","takedown_slug":"breachforums-domain-seizure","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Seized the clearnet domain and associated communication channels."},{"takedown_reference_id":"td_2014_gameover_zeus","takedown_slug":"operation-tovar","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the technical disruption and the multinational coordination."},{"takedown_reference_id":"td_2014_gameover_zeus","takedown_slug":"operation-tovar","organization_reference_id":"org_us_usao_wdpa","organization_slug":"united-states-attorney-s-office-for-the-western-district-of-pennsylvania","role":"charging","role_description":"Filed the indictment against Evgeniy Bogachev."},{"takedown_reference_id":"td_2014_gameover_zeus","takedown_slug":"operation-tovar","organization_reference_id":"org_gb_nca","organization_slug":"national-crime-agency","role":"co_lead","role_description":"Led the UK component of the disruption and victim notification."},{"takedown_reference_id":"td_2014_gameover_zeus","takedown_slug":"operation-tovar","organization_reference_id":"org_eu_europol_ec3","organization_slug":"european-cybercrime-centre","role":"coordinator","role_description":"Coordinated European participation."},{"takedown_reference_id":"td_2014_gameover_zeus","takedown_slug":"operation-tovar","organization_reference_id":"org_priv_secureworks","organization_slug":"secureworks","role":"technical_partner","role_description":"Provided technical analysis of the peer-to-peer network and supported the sinkhole."},{"takedown_reference_id":"td_2014_gameover_zeus","takedown_slug":"operation-tovar","organization_reference_id":"org_priv_crowdstrike","organization_slug":"crowdstrike","role":"technical_partner","role_description":"Participated in the technical disruption."},{"takedown_reference_id":"td_2014_gameover_zeus","takedown_slug":"operation-tovar","organization_reference_id":"org_np_shadowserver","organization_slug":"the-shadowserver-foundation","role":"technical_partner","role_description":"Operated sinkhole infrastructure and victim notification."},{"takedown_reference_id":"td_2016_avalanche","takedown_slug":"avalanche-network-takedown","organization_reference_id":"org_de_sta_verden","organization_slug":"staatsanwaltschaft-verden","role":"lead","role_description":"Directed the German-led investigation and obtained the judicial orders."},{"takedown_reference_id":"td_2016_avalanche","takedown_slug":"avalanche-network-takedown","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the 30-country operation."},{"takedown_reference_id":"td_2016_avalanche","takedown_slug":"avalanche-network-takedown","organization_reference_id":"org_eu_eurojust","organization_slug":"european-union-agency-for-criminal-justice-cooperation","role":"judicial","role_description":"Coordinated judicial cooperation across participating states."},{"takedown_reference_id":"td_2016_avalanche","takedown_slug":"avalanche-network-takedown","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"supporting","role_description":"Participated in the US component of the disruption."},{"takedown_reference_id":"td_2016_avalanche","takedown_slug":"avalanche-network-takedown","organization_reference_id":"org_np_shadowserver","organization_slug":"the-shadowserver-foundation","role":"technical_partner","role_description":"Operated the sinkhole infrastructure used for victim notification."},{"takedown_reference_id":"td_2021_emotet","takedown_slug":"operation-ladybird","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the eight-country operation and hosted the command post."},{"takedown_reference_id":"td_2021_emotet","takedown_slug":"operation-ladybird","organization_reference_id":"org_nl_politie","organization_slug":"politie-netherlands-national-police","role":"co_lead","role_description":"Took control of the primary command-and-control infrastructure hosted in the Netherlands."},{"takedown_reference_id":"td_2021_emotet","takedown_slug":"operation-ladybird","organization_reference_id":"org_de_bka","organization_slug":"bundeskriminalamt","role":"co_lead","role_description":"Executed the German component of the infrastructure takeover."},{"takedown_reference_id":"td_2021_emotet","takedown_slug":"operation-ladybird","organization_reference_id":"org_ua_cyberpolice","organization_slug":"cyberpolice-department-of-the-national-police-of-ukraine","role":"arresting","role_description":"Detained two individuals and raided infrastructure in Ukraine."},{"takedown_reference_id":"td_2021_emotet","takedown_slug":"operation-ladybird","organization_reference_id":"org_eu_eurojust","organization_slug":"european-union-agency-for-criminal-justice-cooperation","role":"judicial","role_description":"Supported judicial coordination."},{"takedown_reference_id":"td_2023_qakbot","takedown_slug":"operation-duck-hunt","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Redirected botnet traffic to FBI-controlled infrastructure and delivered the uninstaller."},{"takedown_reference_id":"td_2023_qakbot","takedown_slug":"operation-duck-hunt","organization_reference_id":"org_us_usao_cdca","organization_slug":"united-states-attorney-s-office-for-the-central-district-of-california","role":"prosecuting","role_description":"Obtained the warrants authorizing the redirection and remediation."},{"takedown_reference_id":"td_2023_qakbot","takedown_slug":"operation-duck-hunt","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the European elements of the operation."},{"takedown_reference_id":"td_2023_qakbot","takedown_slug":"operation-duck-hunt","organization_reference_id":"org_fr_gendarmerie","organization_slug":"gendarmerie-nationale","role":"supporting","role_description":"Participated in the French component of the infrastructure action."},{"takedown_reference_id":"td_2024_911_s5","takedown_slug":"911-s5-botnet-dismantlement","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the investigation and the seizure of botnet infrastructure."},{"takedown_reference_id":"td_2024_911_s5","takedown_slug":"911-s5-botnet-dismantlement","organization_reference_id":"org_us_dcis","organization_slug":"defense-criminal-investigative-service","role":"investigating","role_description":"Participated in the investigation."},{"takedown_reference_id":"td_2024_911_s5","takedown_slug":"911-s5-botnet-dismantlement","organization_reference_id":"org_sg_police","organization_slug":"singapore-police-force","role":"arresting","role_description":"Arrested YunHe Wang in Singapore."},{"takedown_reference_id":"td_2024_911_s5","takedown_slug":"911-s5-botnet-dismantlement","organization_reference_id":"org_us_treasury_ofac","organization_slug":"office-of-foreign-assets-control-united-states-department-of-the-treasury","role":"other","role_description":"Designated Wang, associates, and three Thai entities under sanctions in a parallel action."},{"takedown_reference_id":"td_2024_endgame_w1","takedown_slug":"operation-endgame-wave-1","organization_reference_id":"org_fr_gendarmerie","organization_slug":"gendarmerie-nationale","role":"co_lead","role_description":"One of three initiating national authorities."},{"takedown_reference_id":"td_2024_endgame_w1","takedown_slug":"operation-endgame-wave-1","organization_reference_id":"org_de_bka","organization_slug":"bundeskriminalamt","role":"co_lead","role_description":"One of three initiating national authorities; published the wanted list of remaining suspects."},{"takedown_reference_id":"td_2024_endgame_w1","takedown_slug":"operation-endgame-wave-1","organization_reference_id":"org_nl_politie","organization_slug":"politie-netherlands-national-police","role":"co_lead","role_description":"One of three initiating national authorities."},{"takedown_reference_id":"td_2024_endgame_w1","takedown_slug":"operation-endgame-wave-1","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the operation and hosted the command post."},{"takedown_reference_id":"td_2024_endgame_w1","takedown_slug":"operation-endgame-wave-1","organization_reference_id":"org_eu_eurojust","organization_slug":"european-union-agency-for-criminal-justice-cooperation","role":"judicial","role_description":"Coordinated judicial cooperation."},{"takedown_reference_id":"td_2025_endgame_w2","takedown_slug":"operation-endgame-wave-2","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the second wave."},{"takedown_reference_id":"td_2025_endgame_w2","takedown_slug":"operation-endgame-wave-2","organization_reference_id":"org_de_bka","organization_slug":"bundeskriminalamt","role":"co_lead","role_description":"Executed German infrastructure actions and warrants."},{"takedown_reference_id":"td_2025_endgame_w2","takedown_slug":"operation-endgame-wave-2","organization_reference_id":"org_us_usao_cdca","organization_slug":"united-states-attorney-s-office-for-the-central-district-of-california","role":"charging","role_description":"Filed the DanaBot indictment and charges against the Qakbot administrator."},{"takedown_reference_id":"td_2025_endgame_w3","takedown_slug":"operation-endgame-wave-3","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the third wave."},{"takedown_reference_id":"td_2025_endgame_w3","takedown_slug":"operation-endgame-wave-3","organization_reference_id":"org_gr_police","organization_slug":"hellenic-police","role":"arresting","role_description":"Arrested the principal VenomRAT suspect in Greece."},{"takedown_reference_id":"td_2025_lumma","takedown_slug":"lumma-stealer-disruption","organization_reference_id":"org_priv_microsoft_dcu","organization_slug":"microsoft-digital-crimes-unit","role":"co_lead","role_description":"Obtained the civil court order and seized or sinkholed approximately 2,300 domains."},{"takedown_reference_id":"td_2025_lumma","takedown_slug":"lumma-stealer-disruption","organization_reference_id":"org_us_doj","organization_slug":"united-states-department-of-justice","role":"co_lead","role_description":"Seized the central command structure and the marketplaces selling the malware."},{"takedown_reference_id":"td_2025_lumma","takedown_slug":"lumma-stealer-disruption","organization_reference_id":"org_eu_europol_ec3","organization_slug":"european-cybercrime-centre","role":"coordinator","role_description":"Facilitated suspension of locally based infrastructure in Europe."},{"takedown_reference_id":"td_2025_lumma","takedown_slug":"lumma-stealer-disruption","organization_reference_id":"org_jp_jc3","organization_slug":"japan-cybercrime-control-center","role":"supporting","role_description":"Facilitated suspension of Japan-based infrastructure."},{"takedown_reference_id":"td_2025_lumma","takedown_slug":"lumma-stealer-disruption","organization_reference_id":"org_priv_cloudflare","organization_slug":"cloudflare","role":"technical_partner","role_description":"Blocked and disabled associated infrastructure."},{"takedown_reference_id":"td_2021_netwalker","takedown_slug":"netwalker-ransomware-disruption","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the investigation and the seizure of the dark-web resources."},{"takedown_reference_id":"td_2021_netwalker","takedown_slug":"netwalker-ransomware-disruption","organization_reference_id":"org_us_usao_mdfl","organization_slug":"united-states-attorney-s-office-for-the-middle-district-of-florida","role":"charging","role_description":"Filed charges against Sebastien Vachon-Desjardins."},{"takedown_reference_id":"td_2021_netwalker","takedown_slug":"netwalker-ransomware-disruption","organization_reference_id":"org_bg_gdbop","organization_slug":"general-directorate-combating-organized-crime-bulgaria","role":"infrastructure_seizing","role_description":"Executed the seizure of Bulgaria-hosted dark-web infrastructure."},{"takedown_reference_id":"td_2023_hive","takedown_slug":"hive-ransomware-infiltration-and-seizure","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Covertly penetrated the Hive network, captured decryption keys, and seized the servers and sites."},{"takedown_reference_id":"td_2023_hive","takedown_slug":"hive-ransomware-infiltration-and-seizure","organization_reference_id":"org_us_usao_mdfl","organization_slug":"united-states-attorney-s-office-for-the-middle-district-of-florida","role":"prosecuting","role_description":"Obtained the seizure warrants."},{"takedown_reference_id":"td_2023_hive","takedown_slug":"hive-ransomware-infiltration-and-seizure","organization_reference_id":"org_de_bka","organization_slug":"bundeskriminalamt","role":"infrastructure_seizing","role_description":"Participated in the seizure of German-hosted servers."},{"takedown_reference_id":"td_2023_hive","takedown_slug":"hive-ransomware-infiltration-and-seizure","organization_reference_id":"org_nl_nhtcu","organization_slug":"national-high-tech-crime-unit","role":"infrastructure_seizing","role_description":"Participated in the seizure of Netherlands-hosted servers."},{"takedown_reference_id":"td_2023_hive","takedown_slug":"hive-ransomware-infiltration-and-seizure","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"supporting","role_description":"Supported the international coordination."},{"takedown_reference_id":"td_2024_cronos_w1","takedown_slug":"operation-cronos-wave-1","organization_reference_id":"org_gb_nca","organization_slug":"national-crime-agency","role":"lead","role_description":"Led the international task force and the infiltration and seizure of LockBit's administration environment."},{"takedown_reference_id":"td_2024_cronos_w1","takedown_slug":"operation-cronos-wave-1","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"co_lead","role_description":"Co-led the task force and the US investigative component."},{"takedown_reference_id":"td_2024_cronos_w1","takedown_slug":"operation-cronos-wave-1","organization_reference_id":"org_us_usao_dnj","organization_slug":"united-states-attorney-s-office-for-the-district-of-new-jersey","role":"charging","role_description":"Filed the indictments against Khoroshev, Sungatov, Kondratyev, and others."},{"takedown_reference_id":"td_2024_cronos_w1","takedown_slug":"operation-cronos-wave-1","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the ten-country operation and provided analytical support."},{"takedown_reference_id":"td_2024_cronos_w1","takedown_slug":"operation-cronos-wave-1","organization_reference_id":"org_eu_eurojust","organization_slug":"european-union-agency-for-criminal-justice-cooperation","role":"judicial","role_description":"Coordinated judicial cooperation."},{"takedown_reference_id":"td_2024_cronos_w1","takedown_slug":"operation-cronos-wave-1","organization_reference_id":"org_fr_gendarmerie","organization_slug":"gendarmerie-nationale","role":"supporting","role_description":"Participated in the task force."},{"takedown_reference_id":"td_2024_cronos_w1","takedown_slug":"operation-cronos-wave-1","organization_reference_id":"org_au_afp","organization_slug":"australian-federal-police","role":"supporting","role_description":"Participated in the task force."},{"takedown_reference_id":"td_2024_cronos_w1","takedown_slug":"operation-cronos-wave-1","organization_reference_id":"org_jp_npa","organization_slug":"national-police-agency-of-japan","role":"technical_partner","role_description":"Contributed to the development of decryption capability."},{"takedown_reference_id":"td_2020_encrochat","takedown_slug":"encrochat-interception-and-shutdown","organization_reference_id":"org_fr_gendarmerie","organization_slug":"gendarmerie-nationale","role":"co_lead","role_description":"Deployed the technical device on the France-hosted server infrastructure."},{"takedown_reference_id":"td_2020_encrochat","takedown_slug":"encrochat-interception-and-shutdown","organization_reference_id":"org_nl_politie","organization_slug":"politie-netherlands-national-police","role":"co_lead","role_description":"Co-led the joint investigation team and message analysis."},{"takedown_reference_id":"td_2020_encrochat","takedown_slug":"encrochat-interception-and-shutdown","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated international distribution of intelligence."},{"takedown_reference_id":"td_2020_encrochat","takedown_slug":"encrochat-interception-and-shutdown","organization_reference_id":"org_eu_eurojust","organization_slug":"european-union-agency-for-criminal-justice-cooperation","role":"judicial","role_description":"Supported the joint investigation team framework."},{"takedown_reference_id":"td_2020_encrochat","takedown_slug":"encrochat-interception-and-shutdown","organization_reference_id":"org_gb_nca","organization_slug":"national-crime-agency","role":"supporting","role_description":"Executed the UK operational response under Operation Venetic."},{"takedown_reference_id":"td_2021_sky_ecc","takedown_slug":"sky-ecc-interception-and-action-day","organization_reference_id":"org_be_federal_police","organization_slug":"belgian-federal-police","role":"co_lead","role_description":"Led the Belgian investigation and action day."},{"takedown_reference_id":"td_2021_sky_ecc","takedown_slug":"sky-ecc-interception-and-action-day","organization_reference_id":"org_nl_politie","organization_slug":"politie-netherlands-national-police","role":"co_lead","role_description":"Co-led the technical and investigative effort."},{"takedown_reference_id":"td_2021_sky_ecc","takedown_slug":"sky-ecc-interception-and-action-day","organization_reference_id":"org_be_prosecutor","organization_slug":"federal-public-prosecutor-s-office-of-belgium","role":"prosecuting","role_description":"Directed the Belgian prosecution and judicial authorizations."},{"takedown_reference_id":"td_2021_sky_ecc","takedown_slug":"sky-ecc-interception-and-action-day","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Provided coordination and analytical support."},{"takedown_reference_id":"td_2021_anom","takedown_slug":"operation-trojan-shield","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Designed and covertly operated the ANOM platform and led the global operation."},{"takedown_reference_id":"td_2021_anom","takedown_slug":"operation-trojan-shield","organization_reference_id":"org_au_afp","organization_slug":"australian-federal-police","role":"co_lead","role_description":"Co-developed and co-operated the platform under Operation Ironside."},{"takedown_reference_id":"td_2021_anom","takedown_slug":"operation-trojan-shield","organization_reference_id":"org_us_usao_sdca","organization_slug":"united-states-attorney-s-office-for-the-southern-district-of-california","role":"charging","role_description":"Filed the 17-defendant indictment in San Diego."},{"takedown_reference_id":"td_2021_anom","takedown_slug":"operation-trojan-shield","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated Operation Greenlight across European partners."},{"takedown_reference_id":"td_2021_anom","takedown_slug":"operation-trojan-shield","organization_reference_id":"org_se_police","organization_slug":"polismyndigheten","role":"supporting","role_description":"Executed the Swedish operational component."},{"takedown_reference_id":"td_2019_welcome_to_video","takedown_slug":"welcome-to-video-seizure","organization_reference_id":"org_us_irs_ci","organization_slug":"internal-revenue-service-criminal-investigation","role":"lead","role_description":"Led the financial tracing that identified the site and its users."},{"takedown_reference_id":"td_2019_welcome_to_video","takedown_slug":"welcome-to-video-seizure","organization_reference_id":"org_us_hsi","organization_slug":"homeland-security-investigations","role":"co_lead","role_description":"Co-led the international investigation."},{"takedown_reference_id":"td_2019_welcome_to_video","takedown_slug":"welcome-to-video-seizure","organization_reference_id":"org_kr_knpa","organization_slug":"korean-national-police-agency","role":"arresting","role_description":"Arrested Jong Woo Son and seized the server in South Korea."},{"takedown_reference_id":"td_2019_welcome_to_video","takedown_slug":"welcome-to-video-seizure","organization_reference_id":"org_gb_nca","organization_slug":"national-crime-agency","role":"supporting","role_description":"Participated in the international investigation and UK arrests."},{"takedown_reference_id":"td_2019_welcome_to_video","takedown_slug":"welcome-to-video-seizure","organization_reference_id":"org_us_usao_dc","organization_slug":"united-states-attorney-s-office-for-the-district-of-columbia","role":"charging","role_description":"Filed the nine-count indictment against Son."},{"takedown_reference_id":"td_2019_welcome_to_video","takedown_slug":"welcome-to-video-seizure","organization_reference_id":"org_priv_chainalysis","organization_slug":"chainalysis","role":"financial_tracing","role_description":"Provided blockchain analysis supporting user identification."},{"takedown_reference_id":"td_2018_webstresser","takedown_slug":"webstresser-org-takedown","organization_reference_id":"org_nl_politie","organization_slug":"politie-netherlands-national-police","role":"co_lead","role_description":"Led the Dutch component and infrastructure seizure."},{"takedown_reference_id":"td_2018_webstresser","takedown_slug":"webstresser-org-takedown","organization_reference_id":"org_gb_nca","organization_slug":"national-crime-agency","role":"co_lead","role_description":"Led the UK component."},{"takedown_reference_id":"td_2018_webstresser","takedown_slug":"webstresser-org-takedown","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the international operation."},{"takedown_reference_id":"td_2022_poweroff_dec","takedown_slug":"operation-poweroff-december-2022-wave","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Seized the 48 domains and led the US investigation."},{"takedown_reference_id":"td_2022_poweroff_dec","takedown_slug":"operation-poweroff-december-2022-wave","organization_reference_id":"org_us_usao_cdca","organization_slug":"united-states-attorney-s-office-for-the-central-district-of-california","role":"charging","role_description":"Filed charges against US-based defendants."},{"takedown_reference_id":"td_2022_poweroff_dec","takedown_slug":"operation-poweroff-december-2022-wave","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the international component."},{"takedown_reference_id":"td_2024_poweroff_dec","takedown_slug":"operation-poweroff-december-2024-wave","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the 15-country wave."},{"takedown_reference_id":"td_2026_poweroff_apr","takedown_slug":"operation-poweroff-april-2026-wave","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the 21-country wave."},{"takedown_reference_id":"td_2023_snake","takedown_slug":"operation-medusa","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Developed and deployed the PERSEUS tool that disabled the Snake implants."},{"takedown_reference_id":"td_2023_snake","takedown_slug":"operation-medusa","organization_reference_id":"org_us_usao_edny","organization_slug":"united-states-attorney-s-office-for-the-eastern-district-of-new-york","role":"prosecuting","role_description":"Obtained the Rule 41 warrant authorizing the operation."},{"takedown_reference_id":"td_2023_snake","takedown_slug":"operation-medusa","organization_reference_id":"org_us_cisa","organization_slug":"cybersecurity-and-infrastructure-security-agency","role":"supporting","role_description":"Co-issued the joint technical advisory on Snake."},{"takedown_reference_id":"td_2024_kv_botnet","takedown_slug":"kv-botnet-disruption","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Executed the court-authorized deletion of malware from compromised routers."},{"takedown_reference_id":"td_2024_kv_botnet","takedown_slug":"kv-botnet-disruption","organization_reference_id":"org_us_usao_wdpa","organization_slug":"united-states-attorney-s-office-for-the-western-district-of-pennsylvania","role":"prosecuting","role_description":"Obtained the Rule 41 warrants."},{"takedown_reference_id":"td_2024_kv_botnet","takedown_slug":"kv-botnet-disruption","organization_reference_id":"org_us_cisa","organization_slug":"cybersecurity-and-infrastructure-security-agency","role":"supporting","role_description":"Issued related guidance on Volt Typhoon activity."},{"takedown_reference_id":"td_2024_raptor_train","takedown_slug":"raptor-train-botnet-disruption","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Seized control of the botnet infrastructure and disabled the malware."},{"takedown_reference_id":"td_2024_raptor_train","takedown_slug":"raptor-train-botnet-disruption","organization_reference_id":"org_us_usao_wdpa","organization_slug":"united-states-attorney-s-office-for-the-western-district-of-pennsylvania","role":"prosecuting","role_description":"Obtained the court authorization."},{"takedown_reference_id":"td_2024_raptor_train","takedown_slug":"raptor-train-botnet-disruption","organization_reference_id":"org_priv_lumen","organization_slug":"lumen-technologies-black-lotus-labs","role":"technical_partner","role_description":"Published the technical research identifying the botnet and supported the operation."},{"takedown_reference_id":"td_2011_coreflood","takedown_slug":"coreflood-botnet-disruption","organization_reference_id":"org_us_doj","organization_slug":"united-states-department-of-justice","role":"lead","role_description":"Directed the civil and criminal legal process."},{"takedown_reference_id":"td_2011_coreflood","takedown_slug":"coreflood-botnet-disruption","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"co_lead","role_description":"Executed the technical seizure and substitute-server operation."},{"takedown_reference_id":"td_2011_dnschanger","takedown_slug":"operation-ghost-click","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the investigation and executed the technical takeover."},{"takedown_reference_id":"td_2011_dnschanger","takedown_slug":"operation-ghost-click","organization_reference_id":"org_us_usao_sdny","organization_slug":"united-states-attorney-s-office-for-the-southern-district-of-new-york","role":"prosecuting","role_description":"Charged the defendants."},{"takedown_reference_id":"td_2012_megaupload","takedown_slug":"megaupload-seizure","organization_reference_id":"org_us_doj","organization_slug":"united-states-department-of-justice","role":"lead","role_description":"Directed the federal prosecution."},{"takedown_reference_id":"td_2012_megaupload","takedown_slug":"megaupload-seizure","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"investigating","role_description":"Investigated and executed the domain seizure."},{"takedown_reference_id":"td_2012_megaupload","takedown_slug":"megaupload-seizure","organization_reference_id":"org_nz_police","organization_slug":"new-zealand-police","role":"arresting","role_description":"Executed arrests and searches in New Zealand."},{"takedown_reference_id":"td_2013_citadel","takedown_slug":"citadel-botnet-disruption","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Coordinated the law-enforcement side of the disruption."},{"takedown_reference_id":"td_2013_citadel","takedown_slug":"citadel-botnet-disruption","organization_reference_id":"org_priv_microsoft_dcu","organization_slug":"microsoft-digital-crimes-unit","role":"technical_partner","role_description":"Led the parallel civil legal action and technical takedown of botnet infrastructure."},{"takedown_reference_id":"td_2013_zeroaccess","takedown_slug":"zeroaccess-botnet-disruption","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the European law-enforcement side."},{"takedown_reference_id":"td_2013_zeroaccess","takedown_slug":"zeroaccess-botnet-disruption","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"co_lead","role_description":"Participated in the coordinated technical operation."},{"takedown_reference_id":"td_2013_zeroaccess","takedown_slug":"zeroaccess-botnet-disruption","organization_reference_id":"org_priv_microsoft_dcu","organization_slug":"microsoft-digital-crimes-unit","role":"technical_partner","role_description":"Contributed sinkholing and technical takedown support."},{"takedown_reference_id":"td_2015_ramnit","takedown_slug":"ramnit-botnet-disruption","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the international operation."},{"takedown_reference_id":"td_2015_simda","takedown_slug":"simda-botnet-disruption","organization_reference_id":"org_int_interpol","organization_slug":"international-criminal-police-organization","role":"coordinator","role_description":"Coordinated the multinational operation."},{"takedown_reference_id":"td_2015_simda","takedown_slug":"simda-botnet-disruption","organization_reference_id":"org_np_shadowserver","organization_slug":"the-shadowserver-foundation","role":"technical_partner","role_description":"Provided technical support."},{"takedown_reference_id":"td_2015_beebone","takedown_slug":"operation-source-beebone-botnet-disruption","organization_reference_id":"org_nl_politie","organization_slug":"politie-netherlands-national-police","role":"lead","role_description":"Led the technical takedown of Beebone infrastructure."},{"takedown_reference_id":"td_2015_beebone","takedown_slug":"operation-source-beebone-botnet-disruption","organization_reference_id":"org_eu_europol_ec3","organization_slug":"european-cybercrime-centre","role":"coordinator","role_description":"Coordinated the international action via J-CAT."},{"takedown_reference_id":"td_2015_beebone","takedown_slug":"operation-source-beebone-botnet-disruption","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"supporting","role_description":"Supported the US-hosted domain component."},{"takedown_reference_id":"td_2015_playpen","takedown_slug":"operation-pacifier-playpen","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Seized and covertly operated the site; developed and deployed the NIT."},{"takedown_reference_id":"td_2015_operation_babylon","takedown_slug":"operation-babylon","organization_reference_id":"org_it_polizia_postale","organization_slug":"polizia-postale-e-delle-comunicazioni","role":"lead","role_description":"Executed the shutdown and residence search."},{"takedown_reference_id":"td_2015_operation_babylon","takedown_slug":"operation-babylon","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"supporting","role_description":"Supported the Italian-led operation."},{"takedown_reference_id":"td_2015_darkode","takedown_slug":"darkode-forum-takedown","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the US side of the international operation."},{"takedown_reference_id":"td_2015_darkode","takedown_slug":"darkode-forum-takedown","organization_reference_id":"org_us_usao_wdpa","organization_slug":"united-states-attorney-s-office-for-the-western-district-of-pennsylvania","role":"prosecuting","role_description":"Prosecuted US-based defendants."},{"takedown_reference_id":"td_2019_wall_street_market","takedown_slug":"wall-street-market-silkkitie-valhalla-shutdown","organization_reference_id":"org_de_bka","organization_slug":"bundeskriminalamt","role":"lead","role_description":"Led the seizure of Wall Street Market infrastructure."},{"takedown_reference_id":"td_2019_wall_street_market","takedown_slug":"wall-street-market-silkkitie-valhalla-shutdown","organization_reference_id":"org_fi_customs","organization_slug":"finnish-customs","role":"co_lead","role_description":"Led the separate closure of Silkkitie/Valhalla."},{"takedown_reference_id":"td_2019_wall_street_market","takedown_slug":"wall-street-market-silkkitie-valhalla-shutdown","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the international action."},{"takedown_reference_id":"td_2019_wall_street_market","takedown_slug":"wall-street-market-silkkitie-valhalla-shutdown","organization_reference_id":"org_us_dea","organization_slug":"drug-enforcement-administration","role":"supporting","role_description":"Participated in the coordinated US case against a moderator."},{"takedown_reference_id":"td_2019_deepdotweb","takedown_slug":"deepdotweb-domain-seizure","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the investigation and domain seizure."},{"takedown_reference_id":"td_2019_deepdotweb","takedown_slug":"deepdotweb-domain-seizure","organization_reference_id":"org_us_usao_wdpa","organization_slug":"united-states-attorney-s-office-for-the-western-district-of-pennsylvania","role":"prosecuting","role_description":"Prosecuted the case."},{"takedown_reference_id":"td_2019_deepdotweb","takedown_slug":"deepdotweb-domain-seizure","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"supporting","role_description":"Supported the international arrests."},{"takedown_reference_id":"td_2021_darkmarket","takedown_slug":"darkmarket-shutdown","organization_reference_id":"org_de_bka","organization_slug":"bundeskriminalamt","role":"lead","role_description":"Led the seizure and operator arrest."},{"takedown_reference_id":"td_2021_darkmarket","takedown_slug":"darkmarket-shutdown","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the international operation."},{"takedown_reference_id":"td_2021_monopoly_market","takedown_slug":"monopoly-market-seizure","organization_reference_id":"org_de_bka","organization_slug":"bundeskriminalamt","role":"lead","role_description":"Covertly seized and monitored Monopoly Market infrastructure."},{"takedown_reference_id":"td_2023_operation_spector","takedown_slug":"operation-spector","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the multinational sweep."},{"takedown_reference_id":"td_2023_operation_spector","takedown_slug":"operation-spector","organization_reference_id":"org_us_dea","organization_slug":"drug-enforcement-administration","role":"supporting","role_description":"Participated in the US component of the sweep."},{"takedown_reference_id":"td_2020_weleakinfo","takedown_slug":"weleakinfo-seizure","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the US side of the seizure."},{"takedown_reference_id":"td_2020_weleakinfo","takedown_slug":"weleakinfo-seizure","organization_reference_id":"org_gb_nca","organization_slug":"national-crime-agency","role":"supporting","role_description":"Supported the coordinated action; two arrests reported in the UK."},{"takedown_reference_id":"td_2018_vpnfilter","takedown_slug":"vpnfilter-botnet-disruption","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Executed the court-authorized domain seizure and redirection."},{"takedown_reference_id":"td_2018_vpnfilter","takedown_slug":"vpnfilter-botnet-disruption","organization_reference_id":"org_np_shadowserver","organization_slug":"the-shadowserver-foundation","role":"technical_partner","role_description":"Received redirected victim IP data for remediation."},{"takedown_reference_id":"td_2022_cyclops_blink","takedown_slug":"cyclops-blink-disruption","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Executed the court-authorized technical operation."},{"takedown_reference_id":"td_2022_cyclops_blink","takedown_slug":"cyclops-blink-disruption","organization_reference_id":"org_us_doj","organization_slug":"united-states-department-of-justice","role":"prosecuting","role_description":"Sought and obtained court authorization."},{"takedown_reference_id":"td_2022_rsocks","takedown_slug":"rsocks-proxy-botnet-disruption","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Conducted undercover purchases and led the disruption."},{"takedown_reference_id":"td_2022_rsocks","takedown_slug":"rsocks-proxy-botnet-disruption","organization_reference_id":"org_us_usao_sdca","organization_slug":"united-states-attorney-s-office-for-the-southern-district-of-california","role":"prosecuting","role_description":"Pursued the federal case."},{"takedown_reference_id":"td_2022_flubot","takedown_slug":"flubot-disruption","organization_reference_id":"org_nl_politie","organization_slug":"politie-netherlands-national-police","role":"lead","role_description":"Led the international operation."},{"takedown_reference_id":"td_2022_flubot","takedown_slug":"flubot-disruption","organization_reference_id":"org_eu_europol_ec3","organization_slug":"european-cybercrime-centre","role":"coordinator","role_description":"Coordinated via J-CAT."},{"takedown_reference_id":"td_2023_ipstorm","takedown_slug":"ipstorm-botnet-dismantlement","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Investigated and dismantled the botnet."},{"takedown_reference_id":"td_2023_ipstorm","takedown_slug":"ipstorm-botnet-dismantlement","organization_reference_id":"org_us_doj","organization_slug":"united-states-department-of-justice","role":"prosecuting","role_description":"Prosecuted the developer."},{"takedown_reference_id":"td_2023_chipmixer","takedown_slug":"chipmixer-takedown","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"co_lead","role_description":"Led the US side of the seizure and prosecution."},{"takedown_reference_id":"td_2023_chipmixer","takedown_slug":"chipmixer-takedown","organization_reference_id":"org_de_bka","organization_slug":"bundeskriminalamt","role":"co_lead","role_description":"Seized server infrastructure in Germany."},{"takedown_reference_id":"td_2023_ragnar_locker","takedown_slug":"ragnar-locker-disruption","organization_reference_id":"org_fr_gendarmerie","organization_slug":"gendarmerie-nationale","role":"lead","role_description":"Led the coordinated international operation."},{"takedown_reference_id":"td_2023_ragnar_locker","takedown_slug":"ragnar-locker-disruption","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the multinational action."},{"takedown_reference_id":"td_2023_alphv_blackcat","takedown_slug":"alphv-blackcat-disruption","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the technical operation."},{"takedown_reference_id":"td_2023_alphv_blackcat","takedown_slug":"alphv-blackcat-disruption","organization_reference_id":"org_us_doj","organization_slug":"united-states-department-of-justice","role":"prosecuting","role_description":"Directed the federal legal process."},{"takedown_reference_id":"td_2024_nemesis","takedown_slug":"nemesis-market-seizure","organization_reference_id":"org_de_bka","organization_slug":"bundeskriminalamt","role":"lead","role_description":"Seized the marketplace infrastructure."},{"takedown_reference_id":"td_2024_operation_magnus","takedown_slug":"operation-magnus-redline-and-meta-infostealers","organization_reference_id":"org_nl_politie","organization_slug":"politie-netherlands-national-police","role":"lead","role_description":"Led the technical takedown."},{"takedown_reference_id":"td_2024_operation_magnus","takedown_slug":"operation-magnus-redline-and-meta-infostealers","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"supporting","role_description":"Supported the international action."},{"takedown_reference_id":"td_2024_operation_magnus","takedown_slug":"operation-magnus-redline-and-meta-infostealers","organization_reference_id":"org_eu_eurojust","organization_slug":"european-union-agency-for-criminal-justice-cooperation","role":"coordinator","role_description":"Coordinated judicial cooperation."},{"takedown_reference_id":"td_2020_safe_inet","takedown_slug":"safe-inet-insorg-vpn-takedown","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the multinational operation."},{"takedown_reference_id":"td_2021_doublevpn","takedown_slug":"doublevpn-takedown","organization_reference_id":"org_nl_politie","organization_slug":"politie-netherlands-national-police","role":"lead","role_description":"Led the international operation."},{"takedown_reference_id":"td_2021_doublevpn","takedown_slug":"doublevpn-takedown","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the operation."},{"takedown_reference_id":"td_2022_vpnlab","takedown_slug":"vpnlab-net-takedown","organization_reference_id":"org_de_bka","organization_slug":"bundeskriminalamt","role":"lead","role_description":"Led the German component of the operation."},{"takedown_reference_id":"td_2022_vpnlab","takedown_slug":"vpnlab-net-takedown","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the multinational operation."},{"takedown_reference_id":"td_2023_lolekhosted","takedown_slug":"lolekhosted-seizure","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Executed the domain seizure."},{"takedown_reference_id":"td_2023_lolekhosted","takedown_slug":"lolekhosted-seizure","organization_reference_id":"org_us_usao_mdfl","organization_slug":"united-states-attorney-s-office-for-the-middle-district-of-florida","role":"prosecuting","role_description":"Sought the seizure warrant."},{"takedown_reference_id":"td_2024_matrix","takedown_slug":"matrix-encrypted-messaging-service-takedown","organization_reference_id":"org_fr_gendarmerie","organization_slug":"gendarmerie-nationale","role":"co_lead","role_description":"Led the French side of the joint investigation team."},{"takedown_reference_id":"td_2024_matrix","takedown_slug":"matrix-encrypted-messaging-service-takedown","organization_reference_id":"org_nl_politie","organization_slug":"politie-netherlands-national-police","role":"co_lead","role_description":"Led the Dutch side of the joint investigation team."},{"takedown_reference_id":"td_2024_matrix","takedown_slug":"matrix-encrypted-messaging-service-takedown","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Supported the joint investigation team."},{"takedown_reference_id":"td_2022_ispoof","takedown_slug":"ispoof-takedown","organization_reference_id":"org_gb_metropolitan_police","organization_slug":"metropolitan-police-service","role":"lead","role_description":"Led the investigation and takedown."},{"takedown_reference_id":"td_2022_ispoof","takedown_slug":"ispoof-takedown","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the international arrest phase."},{"takedown_reference_id":"td_2024_labhost","takedown_slug":"labhost-phishing-as-a-service-takedown","organization_reference_id":"org_gb_metropolitan_police","organization_slug":"metropolitan-police-service","role":"lead","role_description":"Led the investigation and takedown."},{"takedown_reference_id":"td_2024_labhost","takedown_slug":"labhost-phishing-as-a-service-takedown","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the 19-country operation."},{"takedown_reference_id":"td_2025_heartsender","takedown_slug":"heartsender-takedown","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the seizure."},{"takedown_reference_id":"td_2025_heartsender","takedown_slug":"heartsender-takedown","organization_reference_id":"org_us_doj","organization_slug":"united-states-department-of-justice","role":"prosecuting","role_description":"Directed the federal legal process."},{"takedown_reference_id":"td_2025_cracked_nulled","takedown_slug":"cracked-and-nulled-forums-takedown","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the operation."},{"takedown_reference_id":"td_2025_cracked_nulled","takedown_slug":"cracked-and-nulled-forums-takedown","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"supporting","role_description":"Supported the international coordination."},{"takedown_reference_id":"td_2025_phobos_8base","takedown_slug":"phobos-8base-ransomware-disruption","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the multinational operation."},{"takedown_reference_id":"td_2025_garantex","takedown_slug":"garantex-disruption","organization_reference_id":"org_us_usss","organization_slug":"united-states-secret-service","role":"lead","role_description":"Led the US domain seizure."},{"takedown_reference_id":"td_2025_garantex","takedown_slug":"garantex-disruption","organization_reference_id":"org_us_doj","organization_slug":"united-states-department-of-justice","role":"prosecuting","role_description":"Directed the federal legal process."},{"takedown_reference_id":"td_2025_garantex","takedown_slug":"garantex-disruption","organization_reference_id":"org_fi_nbi","organization_slug":"finnish-national-bureau-of-investigation","role":"supporting","role_description":"Took parallel action against infrastructure/funds in Finland."},{"takedown_reference_id":"td_2021_boystown","takedown_slug":"boystown-csam-platform-takedown","organization_reference_id":"org_de_bka","organization_slug":"bundeskriminalamt","role":"lead","role_description":"Led the multinational task force."},{"takedown_reference_id":"td_2021_boystown","takedown_slug":"boystown-csam-platform-takedown","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the international support."},{"takedown_reference_id":"td_2021_boystown","takedown_slug":"boystown-csam-platform-takedown","organization_reference_id":"org_au_afp","organization_slug":"australian-federal-police","role":"supporting","role_description":"Participated in the international coalition."},{"takedown_reference_id":"td_2025_kidflix","takedown_slug":"operation-stream-kidflix","organization_reference_id":"org_de_bka","organization_slug":"bundeskriminalamt","role":"lead","role_description":"Led the international investigation."},{"takedown_reference_id":"td_2025_kidflix","takedown_slug":"operation-stream-kidflix","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the global law-enforcement coalition."},{"takedown_reference_id":"td_2026_cfake_socfake","takedown_slug":"cfake-com-and-socfake-com-seizure","organization_reference_id":"org_us_hsi","organization_slug":"homeland-security-investigations","role":"lead","role_description":"Led the seizure."},{"takedown_reference_id":"td_2010_operation_in_our_sites","takedown_slug":"operation-in-our-sites-initial-phase","organization_reference_id":"org_us_ice_hsi","organization_slug":"u-s-immigration-and-customs-enforcement-homeland-security-investigations","role":"lead","role_description":"Led the recurring enforcement program."},{"takedown_reference_id":"td_2010_operation_in_our_sites","takedown_slug":"operation-in-our-sites-initial-phase","organization_reference_id":"org_us_national_ipr_center","organization_slug":"national-intellectual-property-rights-coordination-center","role":"co_lead","role_description":"Coordinated the IP-rights enforcement program."},{"takedown_reference_id":"td_2016_kickass_torrents","takedown_slug":"kickass-torrents-takedown","organization_reference_id":"org_us_hsi","organization_slug":"homeland-security-investigations","role":"lead","role_description":"Led the investigation and domain seizure."},{"takedown_reference_id":"td_2016_kickass_torrents","takedown_slug":"kickass-torrents-takedown","organization_reference_id":"org_us_irs_ci","organization_slug":"internal-revenue-service-criminal-investigation","role":"supporting","role_description":"Supported the financial investigation."},{"takedown_reference_id":"td_2016_kickass_torrents","takedown_slug":"kickass-torrents-takedown","organization_reference_id":"org_pl_police","organization_slug":"polish-police","role":"arresting","role_description":"Arrested Vaulin in Poland."},{"takedown_reference_id":"td_2024_iptv_action","takedown_slug":"european-illegal-iptv-enforcement-action","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the multinational action."},{"takedown_reference_id":"td_2026_operation_offsides","takedown_slug":"operation-offsides-2026-fifa-world-cup-streaming-domains","organization_reference_id":"org_us_ice_hsi","organization_slug":"u-s-immigration-and-customs-enforcement-homeland-security-investigations","role":"lead","role_description":"Led the seizure operation."},{"takedown_reference_id":"td_2026_operation_offsides","takedown_slug":"operation-offsides-2026-fifa-world-cup-streaming-domains","organization_reference_id":"org_us_national_ipr_center","organization_slug":"national-intellectual-property-rights-coordination-center","role":"co_lead","role_description":"Coordinated the IP-rights enforcement effort."},{"takedown_reference_id":"td_2018_amaq","takedown_slug":"amaq-propaganda-infrastructure-takedown","organization_reference_id":"org_be_federal_prosecutor_terror","organization_slug":"belgian-federal-prosecutor-s-office-terrorism-section","role":"lead","role_description":"Led the Belgian component."},{"takedown_reference_id":"td_2018_amaq","takedown_slug":"amaq-propaganda-infrastructure-takedown","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the EU-wide action."},{"takedown_reference_id":"td_2019_is_web_infrastructure","takedown_slug":"islamic-state-web-infrastructure-takedown","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the EU-wide action."},{"takedown_reference_id":"td_2024_synergia_ii","takedown_slug":"interpol-synergia-ii","organization_reference_id":"org_int_interpol","organization_slug":"international-criminal-police-organization","role":"lead","role_description":"Led and coordinated the global campaign."},{"takedown_reference_id":"td_2026_synergia_iii","takedown_slug":"interpol-synergia-iii","organization_reference_id":"org_int_interpol","organization_slug":"international-criminal-police-organization","role":"lead","role_description":"Led and coordinated the global campaign."},{"takedown_reference_id":"td_2025_operation_secure","takedown_slug":"interpol-operation-secure","organization_reference_id":"org_int_interpol","organization_slug":"international-criminal-police-organization","role":"lead","role_description":"Led and coordinated the operation."},{"takedown_reference_id":"td_2025_serengeti_2","takedown_slug":"serengeti-2-0","organization_reference_id":"org_int_interpol","organization_slug":"international-criminal-police-organization","role":"co_lead","role_description":"Co-led the operation."},{"takedown_reference_id":"td_2025_serengeti_2","takedown_slug":"serengeti-2-0","organization_reference_id":"org_int_afripol","organization_slug":"african-union-mechanism-for-police-cooperation","role":"co_lead","role_description":"Co-led the African regional coordination."},{"takedown_reference_id":"td_2026_red_card_2","takedown_slug":"red-card-2-0","organization_reference_id":"org_int_interpol","organization_slug":"international-criminal-police-organization","role":"lead","role_description":"Led and coordinated the operation."},{"takedown_reference_id":"td_2019_bestmixer","takedown_slug":"bestmixer-seizure","organization_reference_id":"org_nl_fiod","organization_slug":"fiscale-inlichtingen-en-opsporingsdienst","role":"lead","role_description":"Led the seizure of BestMixer infrastructure."},{"takedown_reference_id":"td_2019_bestmixer","takedown_slug":"bestmixer-seizure","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"supporting","role_description":"Supported the operation."},{"takedown_reference_id":"td_2023_sinbad","takedown_slug":"sinbad-cryptocurrency-mixer-seizure","organization_reference_id":"org_nl_fiod","organization_slug":"fiscale-inlichtingen-en-opsporingsdienst","role":"co_lead","role_description":"Co-led the Dutch component of the seizure."},{"takedown_reference_id":"td_2023_sinbad","takedown_slug":"sinbad-cryptocurrency-mixer-seizure","organization_reference_id":"org_fi_nbi","organization_slug":"finnish-national-bureau-of-investigation","role":"co_lead","role_description":"Co-led the Finnish component of the seizure."},{"takedown_reference_id":"td_2023_sinbad","takedown_slug":"sinbad-cryptocurrency-mixer-seizure","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"co_lead","role_description":"Co-led the US component of the seizure."},{"takedown_reference_id":"td_2026_huione_backend","takedown_slug":"huione-group-backend-infrastructure-seizure","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the investigation and seizure."},{"takedown_reference_id":"td_2026_huione_backend","takedown_slug":"huione-group-backend-infrastructure-seizure","organization_reference_id":"org_us_doj","organization_slug":"united-states-department-of-justice","role":"prosecuting","role_description":"Directed the federal legal process."},{"takedown_reference_id":"td_2026_socksescort","takedown_slug":"socksescort-proxy-network-disruption","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the international action."},{"takedown_reference_id":"td_2026_socksescort","takedown_slug":"socksescort-proxy-network-disruption","organization_reference_id":"org_priv_lumen_black_lotus","organization_slug":"lumen-black-lotus-labs","role":"technical_partner","role_description":"Provided technical mapping of proxy infrastructure."},{"takedown_reference_id":"td_2026_leakbase","takedown_slug":"leakbase-seizure","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the seizure."},{"takedown_reference_id":"td_2026_aisuru_family","takedown_slug":"aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption","organization_reference_id":"org_us_usao_alaska","organization_slug":"united-states-attorney-s-office-for-the-district-of-alaska","role":"lead","role_description":"Led the US prosecutorial component."},{"takedown_reference_id":"td_2026_aisuru_family","takedown_slug":"aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"co_lead","role_description":"Co-led the technical disruption."},{"takedown_reference_id":"td_2026_aisuru_family","takedown_slug":"aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption","organization_reference_id":"org_de_bka","organization_slug":"bundeskriminalamt","role":"supporting","role_description":"Supported the German component."},{"takedown_reference_id":"td_2026_aisuru_family","takedown_slug":"aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption","organization_reference_id":"org_ca_rcmp","organization_slug":"royal-canadian-mounted-police","role":"supporting","role_description":"Supported the Canadian component."},{"takedown_reference_id":"td_2026_aisuru_family","takedown_slug":"aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption","organization_reference_id":"org_nl_politie","organization_slug":"politie-netherlands-national-police","role":"supporting","role_description":"Supported the Dutch component."},{"takedown_reference_id":"td_2026_poweroff_apr_offsides","takedown_slug":"poweroff-eight-domain-action-april-2026-usao-alaska-wave","organization_reference_id":"org_us_usao_alaska","organization_slug":"united-states-attorney-s-office-for-the-district-of-alaska","role":"lead","role_description":"Led the US domain-seizure wave."},{"takedown_reference_id":"td_2018_backpage","takedown_slug":"backpage-com-seizure","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the seizure and investigation."},{"takedown_reference_id":"td_2018_backpage","takedown_slug":"backpage-com-seizure","organization_reference_id":"org_us_doj","organization_slug":"united-states-department-of-justice","role":"prosecuting","role_description":"Directed the federal indictment."},{"takedown_reference_id":"td_2018_3ve","takedown_slug":"3ve-ad-fraud-botnet-disruption","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the investigation and technical disruption."},{"takedown_reference_id":"td_2018_3ve","takedown_slug":"3ve-ad-fraud-botnet-disruption","organization_reference_id":"org_priv_google","organization_slug":"google","role":"technical_partner","role_description":"Contributed to the technical sinkholing and disruption effort."},{"takedown_reference_id":"td_2026_gru_router_network","takedown_slug":"gru-dns-hijacking-router-network-disruption-apt28","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the national-security cyber investigation and technical operation."},{"takedown_reference_id":"td_2026_gru_router_network","takedown_slug":"gru-dns-hijacking-router-network-disruption-apt28","organization_reference_id":"org_us_doj","organization_slug":"united-states-department-of-justice","role":"prosecuting","role_description":"Sought court authorization for the operation."},{"takedown_reference_id":"td_2020_cityxguide","takedown_slug":"cityxguide-seizure","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the investigation and seizure."},{"takedown_reference_id":"td_2017_btc_e","takedown_slug":"btc-e-disruption","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the investigation."},{"takedown_reference_id":"td_2017_btc_e","takedown_slug":"btc-e-disruption","organization_reference_id":"org_us_irs_ci","organization_slug":"internal-revenue-service-criminal-investigation","role":"supporting","role_description":"Conducted the financial investigation."},{"takedown_reference_id":"td_2017_btc_e","takedown_slug":"btc-e-disruption","organization_reference_id":"org_gr_police","organization_slug":"hellenic-police","role":"arresting","role_description":"Arrested Vinnik in Greece at US request."},{"takedown_reference_id":"td_2023_bitzlato","takedown_slug":"bitzlato-operation-cryptostorm","organization_reference_id":"org_us_usao_edny","organization_slug":"united-states-attorney-s-office-for-the-eastern-district-of-new-york","role":"co_lead","role_description":"Led the US prosecutorial component."},{"takedown_reference_id":"td_2023_bitzlato","takedown_slug":"bitzlato-operation-cryptostorm","organization_reference_id":"org_fr_gendarmerie","organization_slug":"gendarmerie-nationale","role":"co_lead","role_description":"Dismantled the digital infrastructure in France."},{"takedown_reference_id":"td_2023_bitzlato","takedown_slug":"bitzlato-operation-cryptostorm","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"coordinator","role_description":"Coordinated the multinational action."},{"takedown_reference_id":"td_2022_z_library","takedown_slug":"z-library-domain-seizure","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the seizure and investigation."},{"takedown_reference_id":"td_2022_z_library","takedown_slug":"z-library-domain-seizure","organization_reference_id":"org_us_usao_edny","organization_slug":"united-states-attorney-s-office-for-the-eastern-district-of-new-york","role":"prosecuting","role_description":"Prosecuted the case."},{"takedown_reference_id":"td_2022_z_library","takedown_slug":"z-library-domain-seizure","organization_reference_id":"org_ar_federal_police","organization_slug":"argentine-federal-police","role":"arresting","role_description":"Arrested both defendants in Córdoba, Argentina, at US request."},{"takedown_reference_id":"td_2023_kingdom_market","takedown_slug":"kingdom-market-seizure","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the investigation."},{"takedown_reference_id":"td_2023_kingdom_market","takedown_slug":"kingdom-market-seizure","organization_reference_id":"org_us_hsi","organization_slug":"homeland-security-investigations","role":"co_lead","role_description":"Co-led the investigation."},{"takedown_reference_id":"td_2015_dridex","takedown_slug":"dridex-bugat-cridex-disruption","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"co_lead","role_description":"Co-led the US side of the operation."},{"takedown_reference_id":"td_2015_dridex","takedown_slug":"dridex-bugat-cridex-disruption","organization_reference_id":"org_gb_nca","organization_slug":"national-crime-agency","role":"co_lead","role_description":"Co-led the UK technical disruption."},{"takedown_reference_id":"td_2024_samourai_wallet","takedown_slug":"samourai-wallet-seizure","organization_reference_id":"org_us_usao_sdny","organization_slug":"united-states-attorney-s-office-for-the-southern-district-of-new-york","role":"lead","role_description":"Led the federal prosecution."},{"takedown_reference_id":"td_2024_samourai_wallet","takedown_slug":"samourai-wallet-seizure","organization_reference_id":"org_us_irs_ci","organization_slug":"internal-revenue-service-criminal-investigation","role":"co_lead","role_description":"Co-led the financial investigation."},{"takedown_reference_id":"td_2024_samourai_wallet","takedown_slug":"samourai-wallet-seizure","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"supporting","role_description":"Supported the investigation."},{"takedown_reference_id":"td_2024_samourai_wallet","takedown_slug":"samourai-wallet-seizure","organization_reference_id":"org_is_police","organization_slug":"icelandic-police","role":"supporting","role_description":"Seized web servers hosted in Iceland."},{"takedown_reference_id":"td_2024_radar_dispossessor","takedown_slug":"radar-dispossessor-ransomware-disruption","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead","role_description":"Led the investigation and technical action."},{"takedown_reference_id":"td_2024_radar_dispossessor","takedown_slug":"radar-dispossessor-ransomware-disruption","organization_reference_id":"org_gb_nca","organization_slug":"national-crime-agency","role":"supporting","role_description":"Supported the UK component of the disruption."},{"takedown_reference_id":"td_2024_radar_dispossessor","takedown_slug":"radar-dispossessor-ransomware-disruption","organization_reference_id":"org_de_bka","organization_slug":"bundeskriminalamt","role":"supporting","role_description":"Supported the German component of the disruption."},{"takedown_reference_id":"td_2020_cityxguide","takedown_slug":"cityxguide-seizure","organization_reference_id":"org_us_hsi","organization_slug":"homeland-security-investigations","role":"lead_investigator","role_description":"Led the North Texas Trafficking Task Force investigation and seized the sites."},{"takedown_reference_id":"td_2020_cityxguide","takedown_slug":"cityxguide-seizure","organization_reference_id":"org_us_usss","organization_slug":"united-states-secret-service","role":"investigator","role_description":"Participated in the investigation and arrest."},{"takedown_reference_id":"td_2020_cityxguide","takedown_slug":"cityxguide-seizure","organization_reference_id":"org_us_usao_ndtx","organization_slug":"united-states-attorney-s-office-for-the-northern-district-of-texas","role":"prosecutor","role_description":"Prosecuted the 28-count indictment, plea and sentencing."},{"takedown_reference_id":"td_2024_samourai_wallet","takedown_slug":"samourai-wallet-seizure","organization_reference_id":"org_us_irs_ci","organization_slug":"internal-revenue-service-criminal-investigation","role":"lead_investigator","role_description":"Investigated the cryptocurrency-mixing operation."},{"takedown_reference_id":"td_2024_samourai_wallet","takedown_slug":"samourai-wallet-seizure","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"lead_investigator","role_description":"Investigated and supported arrests and infrastructure seizure."},{"takedown_reference_id":"td_2024_samourai_wallet","takedown_slug":"samourai-wallet-seizure","organization_reference_id":"org_us_usao_sdny","organization_slug":"united-states-attorney-s-office-for-the-southern-district-of-new-york","role":"prosecutor","role_description":"Prosecuted Rodriguez and Hill."},{"takedown_reference_id":"td_2024_samourai_wallet","takedown_slug":"samourai-wallet-seizure","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"international_support","role_description":"Supported international coordination."},{"takedown_reference_id":"td_2024_samourai_wallet","takedown_slug":"samourai-wallet-seizure","organization_reference_id":"org_pt_judicial_police","organization_slug":"policia-judiciaria","role":"arrest_extradition_partner","role_description":"Arrested Hill in Portugal and supported extradition."},{"takedown_reference_id":"td_2026_aisuru_family","takedown_slug":"aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption","organization_reference_id":"org_us_dcis","organization_slug":"defense-criminal-investigative-service","role":"lead_investigator","role_description":"Executed U.S. seizure warrants and investigated KimWolf."},{"takedown_reference_id":"td_2026_aisuru_family","takedown_slug":"aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"investigator","role_description":"Supported the U.S. investigation."},{"takedown_reference_id":"td_2026_aisuru_family","takedown_slug":"aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption","organization_reference_id":"org_de_bka","organization_slug":"bundeskriminalamt","role":"foreign_partner","role_description":"Conducted parallel German action against operators and infrastructure."},{"takedown_reference_id":"td_2026_aisuru_family","takedown_slug":"aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption","organization_reference_id":"org_ca_rcmp","organization_slug":"royal-canadian-mounted-police","role":"foreign_partner","role_description":"Participated in Canadian action and Butler arrest/extradition process."},{"takedown_reference_id":"td_2026_aisuru_family","takedown_slug":"aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption","organization_reference_id":"org_ca_opp","organization_slug":"ontario-provincial-police","role":"foreign_partner","role_description":"Participated in Canadian action."},{"takedown_reference_id":"td_2026_aisuru_family","takedown_slug":"aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption","organization_reference_id":"org_ca_surete_quebec","organization_slug":"surete-du-quebec","role":"foreign_partner","role_description":"Participated in Canadian action."},{"takedown_reference_id":"td_2026_aisuru_family","takedown_slug":"aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption","organization_reference_id":"org_eu_europol","organization_slug":"european-union-agency-for-law-enforcement-cooperation","role":"international_support","role_description":"PowerOFF team assisted the operation."},{"takedown_reference_id":"td_2018_backpage","takedown_slug":"backpage-com-seizure","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"investigator","role_description":"Investigated the Backpage enterprise and seizure."},{"takedown_reference_id":"td_2018_backpage","takedown_slug":"backpage-com-seizure","organization_reference_id":"org_us_irs_ci","organization_slug":"internal-revenue-service-criminal-investigation","role":"investigator","role_description":"Investigated financial and money-laundering aspects."},{"takedown_reference_id":"td_2018_backpage","takedown_slug":"backpage-com-seizure","organization_reference_id":"org_us_postal_inspection","organization_slug":"united-states-postal-inspection-service","role":"investigator","role_description":"Participated in the investigation."},{"takedown_reference_id":"td_2018_backpage","takedown_slug":"backpage-com-seizure","organization_reference_id":"org_us_usao_az","organization_slug":"united-states-attorney-s-office-for-the-district-of-arizona","role":"prosecutor","role_description":"Prosecuted the principal criminal case."},{"takedown_reference_id":"td_2023_kingdom_market","takedown_slug":"kingdom-market-seizure","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"investigator","role_description":"Investigated Kingdom Market and arrested Alan Bill."},{"takedown_reference_id":"td_2023_kingdom_market","takedown_slug":"kingdom-market-seizure","organization_reference_id":"org_us_hsi","organization_slug":"homeland-security-investigations","role":"investigator","role_description":"Participated in investigation and arrest."},{"takedown_reference_id":"td_2023_kingdom_market","takedown_slug":"kingdom-market-seizure","organization_reference_id":"org_us_irs_ci","organization_slug":"internal-revenue-service-criminal-investigation","role":"investigator","role_description":"Investigated cryptocurrency and financial aspects."},{"takedown_reference_id":"td_2023_kingdom_market","takedown_slug":"kingdom-market-seizure","organization_reference_id":"org_us_dea","organization_slug":"drug-enforcement-administration","role":"investigator","role_description":"Investigated drug trafficking."},{"takedown_reference_id":"td_2023_kingdom_market","takedown_slug":"kingdom-market-seizure","organization_reference_id":"org_us_usao_edmo","organization_slug":"united-states-attorney-s-office-for-the-eastern-district-of-missouri","role":"prosecutor","role_description":"Prosecuted Alan Bill."},{"takedown_reference_id":"td_2023_kingdom_market","takedown_slug":"kingdom-market-seizure","organization_reference_id":"org_de_bka","organization_slug":"bundeskriminalamt","role":"foreign_partner","role_description":"Provided German investigative assistance."},{"takedown_reference_id":"td_2023_kingdom_market","takedown_slug":"kingdom-market-seizure","organization_reference_id":"org_de_zit","organization_slug":"zentralstelle-zur-bekampfung-der-internetkriminalitat-generalstaatsanwaltschaft-","role":"foreign_prosecutor","role_description":"Provided German prosecutorial assistance."},{"takedown_reference_id":"td_2017_btc_e","takedown_slug":"btc-e-disruption","organization_reference_id":"org_us_fbi","organization_slug":"federal-bureau-of-investigation","role":"investigator","role_description":"Investigated BTC-e and Vinnik."},{"takedown_reference_id":"td_2017_btc_e","takedown_slug":"btc-e-disruption","organization_reference_id":"org_us_irs_ci","organization_slug":"internal-revenue-service-criminal-investigation","role":"investigator","role_description":"Investigated financial and cryptocurrency activity."},{"takedown_reference_id":"td_2017_btc_e","takedown_slug":"btc-e-disruption","organization_reference_id":"org_us_usss","organization_slug":"united-states-secret-service","role":"investigator","role_description":"Participated in the investigation."},{"takedown_reference_id":"td_2017_btc_e","takedown_slug":"btc-e-disruption","organization_reference_id":"org_us_hsi","organization_slug":"homeland-security-investigations","role":"investigator","role_description":"Participated in the investigation."},{"takedown_reference_id":"td_2017_btc_e","takedown_slug":"btc-e-disruption","organization_reference_id":"org_us_usao_ndca","organization_slug":"united-states-attorney-s-office-for-the-northern-district-of-california","role":"prosecutor","role_description":"Prosecuted Vinnik and BTC-e."}]}