Skip to main content

Public record database

Sources

The Internet Takedown Index is built from law enforcement releases, prosecutor and court records, government and agency publications, company reports, and news coverage. Every entry in the index traces back to one of the documents listed here.

152 sources indexed Cited 575 times across the index
137 official documents Government, prosecutor, court, and agency records
Research cutoff August 20, 2026

4 of the 152 sources carry a recorded web address. The rest give publisher, title, and date so the document can be retrieved from the publisher.

Showing 51 to 75 of 152 sources

Source Type Description Publisher Quality Used in entries
International investigation disrupts the world's most harmful cyber crime group
Law enforcement release 34 servers seized, decryption keys, wallet freezes, account closures, leak-site takeover, task force roster National Crime Agency P1 9
CISA guidance on Volt Typhoon activity against critical infrastructure
Government release Threat context for the KV Botnet disruption Cybersecurity and Infrastructure Security Agency P2 2
U.S. Government Disrupts Botnet People's Republic of China Used to Conceal Hacking of Critical Infrastructure
Government release Court-authorized malware deletion from routers, Rule 41 warrants in WDPA, reinfection caveat United States Department of Justice P1 5
Distributor of Anom Hardened Encrypted Devices Sentenced to 63 Months in Prison for Racketeering
Prosecutor release Sentencing of an ANOM distributor to 63 months United States Attorney's Office, Southern District of California P1 2
Justice Department disrupts ALPHV/BlackCat ransomware
Prosecutor release Establishes the FBI's disruption of ALPHV/BlackCat infrastructure and the decryption-key offer. US DOJ P1 3
Kingdom Market darknet marketplace dismantled; administrator Alan Bill arrested
Prosecutor release Establishes the Kingdom Market shutdown and the arrest of alleged administrator Alan Bill in Newark, New Jersey. US DOJ / FBI / HSI S2 4
Sinbad cryptocurrency mixer infrastructure seized
Prosecutor release Establishes the trilateral seizure of Sinbad mixer infrastructure. US DOJ / Dutch and Finnish authorities P1 3
IPStorm botnet developer pleads guilty; botnet dismantled
Prosecutor release Establishes the IPStorm dismantlement and Makinin's guilty plea. US DOJ CCIPS P1 3
Ragnar Locker ransomware infrastructure disrupted
International agency release Establishes the French-led operation and the multi-country infrastructure seizures. Europol P2 2
Europol release on the Qakbot infrastructure takedown
International agency release European participation and coordination roles Europol P2 3
Qakbot Malware Disrupted in International Cyber Takedown
Government release Traffic redirection, uninstaller deployment, server and cryptocurrency seizures, absence of arrests United States Department of Justice P1 6
Justice Department seizes LolekHosted.net domain
Prosecutor release Establishes the LolekHosted.net domain seizure and its connection to NetWalker ransomware attacks. US DOJ / USAO MDFL P1 3
Hunting Russian Intelligence 'Snake' Malware, joint cybersecurity advisory
Government release Technical description of Snake and its network Cybersecurity and Infrastructure Security Agency P2 2
Justice Department Announces Court-Authorized Disruption of Snake Malware Network Controlled by Russia's Federal Security Service
Government release PERSEUS tool, Rule 41 warrant in EDNY, self-overwrite mechanism, FSB Center 16 attribution United States Department of Justice P1 6
Operation SpecTor: 288 dark web vendors arrested worldwide
International agency release Establishes the 288-arrest figure, seized cash/virtual currency, drugs, and firearms. Europol P2 3
Monopoly Market infrastructure seizure
International agency release Establishes the covert 2021 German seizure of Monopoly Market infrastructure later disclosed alongside Operation SpecTor. Europol P2 1
NCA statement on Operation Cookie Monster
Law enforcement release UK arrests and searches National Crime Agency P2 2
Takedown of Genesis Market, the largest online marketplace for stolen credentials
International agency release 17-country coordination, 119 arrests, 208 property searches Europol P2 4
Genesis Market, a major initial access broker, seized in international operation
Government release Domain seizures under an EDWI warrant, US server seizures United States Department of Justice P1 5
Specialist reporting on the BreachForums shutdown and later sentencing
News report Forum shutdown decision, staff statements, sentencing and resentencing history Established specialist cybersecurity publication S2 3
United States v. Conor Brian Fitzpatrick, criminal complaint and affidavit
Court filing Arrest, charge, and identification of the BreachForums administrator United States District Court for the Eastern District of Virginia P0 7
ChipMixer cryptocurrency mixer dismantled
Prosecutor release Establishes the US-German seizure of ChipMixer infrastructure and the charge against its alleged operator. US DOJ / FBI P1 6
Europol statement on the Hive ransomware takedown
International agency release International coordination and German and Dutch participation Europol P2 2
U.S. Department of Justice Disrupts Hive Ransomware Variant
Government release Covert network access from July 2022, more than 300 decryption keys to victims under attack and more than 1,000 to previous victims, approximately 130 million USD in ransom demands averted, German and Dutch server seizures United States Department of Justice P1 9
Bitzlato dismantled; founder Anatoly Legkodymov charged
Prosecutor release Establishes the French-led dismantlement of Bitzlato infrastructure and the charge/arrest of founder Anatoly Legkodymov. US DOJ / USAO EDNY / FBI P1 6

Showing 51 to 75 of 152 sources