[Back to Operation PowerOFF May 2025 wave](https://takedownindex.org/takedowns/operation-poweroff-may-2025-wave)

Operation PowerOFF

# Organizations and roles

May 2025, DDoS for hire
[Operation PowerOFF May 2025 wave](https://takedownindex.org/takedowns/operation-poweroff-may-2025-wave)

Last reviewed August 23, 2026

The public record puts 6 organizations on this action. Operational lead: DCIS. The table lists the role the cited record assigns each one, in the record's own wording where it gives any.

## Why this page names organizations only

Roles on this page describe the agencies that took part. Individuals named in the public record appear on the takedown entry itself, under People and accountability.

## Organizations and roles

| Emblem | Organization | Role | What the record says |
| --- | --- | --- | --- |
| | [Defense Criminal Investigative Service](https://takedownindex.org/organizations/defense-criminal-investigative-service), United States | Operational lead | Executed the seizures through its Cyber-West Resident Agency and established, from thousands of communications between booter administrators and customers, that the 'stresser' network-testing claims were a pretense. |
| | [United States Attorney's Office for the Central District of California](https://takedownindex.org/organizations/united-states-attorney-s-office-for-the-central-district-of-california), United States | Prosecuting | Obtained the seizure warrants on an affidavit filed in its district and is handling the investigation through AUSAs James E. Dochterman and Aaron Frumkin. US Attorney Bill Essayli announced the action. |
| | [Polish Police](https://takedownindex.org/organizations/polish-police), Poland | Arresting | Poland's Central Cybercrime Bureau (CBZC) announced the arrest of four administrators of DDoS-for-hire services in investigations assisted by US authorities. |
| | [Homeland Security Investigations](https://takedownindex.org/organizations/homeland-security-investigations), United States | Supporting | With DCIS and the Netherlands Police, ran a targeted search-engine advertising campaign to deter people searching for DDoS-for-hire services. |
| | [United States Attorney's Office for the District of Alaska](https://takedownindex.org/organizations/united-states-attorney-s-office-for-the-district-of-alaska), United States | Supporting | Co-announcing district; US Attorney Michael J. Heyman spoke to the action, and the office is a listed component of the release. |
| | [Politie (Netherlands National Police)](https://takedownindex.org/organizations/politie-netherlands-national-police), Netherlands | Other | With HSI and DCIS, ran a targeted search-engine advertising campaign to deter people searching for DDoS-for-hire services. |

## Accountability

### Legal authority

Court-authorized seizure warrants supported by an affidavit filed in the Central District of California; separate Polish national process for the arrests

### Oversight

The record assigns prosecuting or judicial roles to USAO-CDCA.

### Ongoing investigation

Group accounted for: Partial. Four administrators arrested against nine seized domains, and no identities were published.

This page records organizational involvement as the cited sources state it. Where a role carries no description, the record gives none.

Last reviewed August 23, 2026