Back to Welcome to Video seizure
Organizations and roles
Last reviewed August 21, 2026
The public record puts 6 organizations on this action. Operational lead: IRS-CI and HSI. The table lists the role the cited record assigns each one, in the record's own wording where it gives any.
Why this page names organizations only
Roles on this page describe the agencies that took part. Individuals named in the public record appear on the takedown entry itself, under People and accountability.
Organizations and roles
| Emblem | Organization | Role | What the record says |
|---|---|---|---|
| Internal Revenue Service Criminal Investigation United States , United States | Operational lead | Led the financial tracing that identified the site and its users. | |
| Homeland Security Investigations United States , United States | Co-lead | Co-led the international investigation. | |
| United States Attorney's Office for the District of Columbia United States , United States | Charging | Filed the nine-count indictment against Son. | |
| Korean National Police Agency South Korea , South Korea | Arresting | Arrested Jong Woo Son and seized the server in South Korea. | |
| Chainalysis United States , United States | Financial tracing | Provided blockchain analysis supporting user identification. | |
| National Crime Agency United Kingdom , United Kingdom | Supporting | Participated in the international investigation and UK arrests. |
Accountability
Legal authority
Korean judicial process for the server seizure; US indictment and forfeiture (District of Columbia); mutual legal assistance
This page records organizational involvement as the cited sources state it. Where a role carries no description, the record gives none.
Last reviewed August 21, 2026