Skip to main content
Back to Operation Cookie Monster

Organizations and roles

April 2023, Fraud and stolen data
Operation Cookie Monster

Last reviewed August 21, 2026

The public record puts 5 organizations on this action. Operational lead: FBI and Dutch National Police. The table lists the role the cited record assigns each one, in the record's own wording where it gives any.

Why this page names organizations only

Roles on this page describe the agencies that took part. Individuals named in the public record appear on the takedown entry itself, under People and accountability.

Organizations and roles

Emblem Organization Role What the record says
Federal Bureau of Investigation United States , United States Co-lead Led the US component and executed the domain seizures.
Politie (Netherlands National Police) Netherlands , Netherlands Co-lead Co-led the international operation.
European Union Agency for Law Enforcement Cooperation Coordinator Coordinated the 17-country action and hosted the operational centre.
Qintel United States , United States Technical partner Provided technical analysis supporting the investigation.
National Crime Agency United Kingdom , United Kingdom Supporting Executed UK arrests and searches.

Accountability

Legal authority

US seizure warrant (Eastern District of Wisconsin); parallel Dutch and partner judicial process; Europol and Eurojust coordination

Ongoing investigation

Group accounted for: Partial. Infrastructure was seized and a large number of users arrested, but no core administrator was publicly identified, charged, or apprehended.

This page records organizational involvement as the cited sources state it. Where a role carries no description, the record gives none.

Last reviewed August 21, 2026