[Back to Operation PowerOFF May 2023 wave](https://takedownindex.org/takedowns/operation-poweroff-may-2023-wave)

Operation PowerOFF

# Organizations and roles

May 2023, DDoS for hire
[Operation PowerOFF May 2023 wave](https://takedownindex.org/takedowns/operation-poweroff-may-2023-wave)

Last reviewed August 23, 2026

The public record puts 2 organizations on this action. Operational lead: FBI. The table lists the role the cited record assigns each one, in the record's own wording where it gives any.

## Why this page names organizations only

Roles on this page describe the agencies that took part. Individuals named in the public record appear on the takedown entry itself, under People and accountability.

## Organizations and roles

| Emblem | Organization | Role | What the record says |
| --- | --- | --- | --- |
| | [Federal Bureau of Investigation](https://takedownindex.org/organizations/federal-bureau-of-investigation), United States | Operational lead | Investigated the 13 services, opened or renewed subscriber accounts on each, paid in cryptocurrency and ran test attacks against FBI-controlled computers to confirm the services worked. Investigating offices were the FBI's Anchorage and Los Angeles field offices. |
| | [United States Attorney's Office for the Central District of California](https://takedownindex.org/organizations/united-states-attorney-s-office-for-the-central-district-of-california), United States | Prosecuting | Filed the seizure-warrant affidavit and handled the seizures and the related prosecutions. AUSA James E. Dochterman of the Asset Forfeiture and Recovery Section handled the domain seizures; AUSAs Cameron L. Schroeder and Aaron Frumkin prosecuted the criminal cases. |

## Accountability

### Legal authority

Court-authorized seizure warrants supported by an affidavit filed in the Central District of California

### Oversight

The record assigns prosecuting or judicial roles to USAO-CDCA.

### Ongoing investigation

Group accounted for: Partial. No operator of the 13 newly seized services was publicly identified in this action.

This page records organizational involvement as the cited sources state it. Where a role carries no description, the record gives none.

Last reviewed August 23, 2026