[Back to the takedown index](https://takedownindex.org/takedowns)

# WeLeakInfo seizure

January 2020, Fraud and stolen data
Led by [Federal Bureau of Investigation](https://takedownindex.org/organizations/federal-bureau-of-investigation)

Extended pass entry, last reviewed August 21, 2026

What was taken down?

Domain seized and replaced with a law-enforcement notice.

[See what happened](#what-happened)

What happened to the people?

Officials reported 2 apprehended.
Group accounted for: Partial

[See people and accountability](#people)

Did it stay down?

After this action the service returned on replacement infrastructure, first seen February 2020. The replacement was itself seized in a later action. High confidence in the link between the two.

[See what happened afterward](#afterward)

## What happened

A multinational operation including US, UK, Netherlands, and Germany seized the WeLeakInfo domain, a subscription service selling access to breached personal data.

**Date:** January 2020

**Target:** WeLeakInfo, stolen data marketplace

**Activity:** Fraud and stolen data

**Operational lead:** FBI

**Partners**

NCA[[1]](#source-1)

- [National Crime Agency](https://takedownindex.org/organizations/national-crime-agency), supporting

**Jurisdiction:** Not established

**Outcome:** Domain seized and replaced with a law-enforcement notice.

**Status:** Completed

**Legal mechanism:** US domain seizure warrant; coordinated with UK/NL/DE authorities.

**Group accounted for:** Partial

### Infrastructure

1 domain seized.

| Identifier | Recorded as | Status | Notes |
| --- | --- | --- | --- |
| weleakinfo[.]com | 1 domain | Seized, United States | Primary WeLeakInfo domain.[[1]](#source-1) |

Domains and onion addresses are shown defanged. Where the record gives a count but no identifier, the count is shown in place of one. This list carries only what appears in the cited sources.

## People and accountability

No individual is named against this entry in the cited record. That is a gap in what has been published rather than a finding that nobody was involved.

Group accounted for: Partial

The cited record does not say how large the group was or whether everyone involved has been identified.

[See the organizations and roles behind this action](https://takedownindex.org/takedowns/weleakinfo-seizure/organizations)

## What happened afterward

After this action the service returned on replacement infrastructure, first seen February 2020. The replacement was itself seized in a later action. High confidence in the link between the two.

February 2020

WeLeakInfo.to replacement service. Same service on replacement infrastructure. Confidence: High. Seized in a later action.[[1]](#source-1)

A replacement service using the same branding and service model appeared shortly after the original seizure; the replacement infrastructure was itself later seized by law enforcement.

weleakinfo[.]to

## Sources

Numbered markers throughout this entry link to the source that supports the claim beside them.

### Official sources

1.
[WeLeakInfo domain seizure announcement](https://takedownindex.org/sources/us-doj-weleakinfo-domain-seizure-announcement)

US DOJ, January 15, 2020, Source grade S2

Establishes the multinational WeLeakInfo domain seizure.

No address recorded for this source. Publisher, title, and date are given so it can be retrieved from the publisher.

Coverage note. Added from deep-research aggregation pass. Not independently re-verified source-by-source to the same standard as the original 38-incident core; source\_quality capped at S2/P2 pending a dedicated verification pass.

Research context

## How this entry was checked

This entry came from a broader aggregation pass and has not been independently verified source by source. Its sources are graded no higher than P2 or S2, and most carry no address yet. Treat the figures as a research lead rather than a settled record.

Source review: Extended pass, not yet verified

Sources cited: 1

Research cutoff: August 20, 2026

Last reviewed August 21, 2026

See also

[About the Internet Takedown Index](https://takedownindex.org/about)

Related entries

- [CityXGuide seizure](https://takedownindex.org/takedowns/cityxguide-seizure)
- [DeepDotWeb domain seizure](https://takedownindex.org/takedowns/deepdotweb-domain-seizure)
- [NetWalker ransomware disruption](https://takedownindex.org/takedowns/netwalker-ransomware-disruption)

Report updates or corrections

Help keep this record accurate.

[Submit feedback](https://takedownindex.org/about#corrections-and-updates)