Skip to main content

Public record database

Takedown Index

The Internet Takedown Index documents law enforcement seizures, sinkholes, takeovers, and shutdowns of criminal internet infrastructure. Every entry traces to a cited source.

104 takedowns indexed Across 37 jurisdictions
Last reviewed August 20, 2026
Takedown Date Category Lead organization Jurisdiction Status Derived from the recorded end date. A date in the past reads Completed, no date reads Ongoing. The dataset carries no separate status column.
LeakBase seizure ID: td_2026_leakbase Mar 4, 2026 Fraud and stolen data FBI Not established Completed
Red Card 2.0 ID: td_2026_red_card_2 Feb 18, 2026 Fraud and stolen data INTERPOL Not established Completed
Serengeti 2.0 ID: td_2025_serengeti_2 Aug 22, 2025 Fraud and stolen data INTERPOL and AFRIPOL Not established Completed
HeartSender takedown ID: td_2025_heartsender Jan 30, 2025 Fraud and stolen data FBI Not established Completed
BreachForums portal seizure (2025) ID: td_2025_breachforums Jan 1, 2025 Fraud and stolen data Not established International Ongoing
BreachForums domain seizure ID: td_2024_breachforums May 15, 2024 Fraud and stolen data FBI International Completed
Operation Cookie Monster ID: td_2023_genesis Apr 4, 2023 Fraud and stolen data FBI and Dutch National Police International Completed
BreachForums shutdown following administrator arrest ID: td_2023_breachforums Mar 21, 2023 Fraud and stolen data FBI 🇺🇸 United States Completed
iSpoof takedown ID: td_2022_ispoof Nov 23, 2022 Fraud and stolen data Met Police Not established Completed
Operation Tourniquet ID: td_2022_raidforums Apr 12, 2022 Fraud and stolen data FBI International Completed
WeLeakInfo seizure ID: td_2020_weleakinfo Jan 15, 2020 Fraud and stolen data FBI Not established Completed

Showing 1 to 11 of 11 takedowns

11 results

March 2026

LeakBase seizure

LeakBase Fraud and stolen data

Lead
FBI
Result
Site infrastructure and database seized.
Accountability
No individual outcomes recorded
Return status
Not established in the public record

February 2026

Red Card 2.0

Cross-border online fraud infrastructure Fraud and stolen data

Lead
INTERPOL
Result
Fraud-related infrastructure disrupted across participating countries.
Accountability
No individual outcomes recorded
Return status
Not established in the public record

August 2025

Serengeti 2.0

Fraud infrastructure across 18 African countries Fraud and stolen data

Lead
INTERPOL and AFRIPOL
Result
More than 11,000 malicious infrastructures disrupted.
Accountability
No individual outcomes recorded
Return status
Not established in the public record

January 2025

HeartSender takedown

HeartSender ("Saim Raza") Fraud and stolen data

Lead
FBI
Result
39 domains and associated servers seized.
Accountability
No individual outcomes recorded
Return status
Not established in the public record
BreachForums portal seizure (2025)

BreachForums (further reconstituted) Fraud and stolen data

Lead
Not established
Result
Portal infrastructure seized and replaced with a law-enforcement notice.
Accountability
No individual outcomes recorded
Return status
Not established in the public record

May 2024

BreachForums domain seizure

BreachForums (reconstituted) Fraud and stolen data

Lead
FBI
Result
Clearnet domain seized and redirected to a seizure notice; associated Telegram infrastructure disrupted. Operators briefly regained the domain via registrar transfer credentials before losing it again.
Accountability
No individual outcomes recorded
Return status
Returned with some of the same operators

April 2023

Operation Cookie Monster

Genesis Market Fraud and stolen data

Lead
FBI and Dutch National Police
Result
Eleven domains seized under a US warrant; US-based servers seized; marketplace clearnet access replaced with seizure notice.
Accountability
119 apprehended
Return status
Not established in the public record

March 2023

BreachForums shutdown following administrator arrest

BreachForums Fraud and stolen data

Lead
FBI
Result
Forum taken offline by a remaining staff member citing law-enforcement access to infrastructure; administrator's devices and accounts seized.
Accountability
1 charged, 1 apprehended, and 1 convicted
Return status
Returned with some of the same operators

November 2022

iSpoof takedown

iSpoof Fraud and stolen data

Lead
Met Police
Result
Platform infrastructure seized; service taken offline.
Accountability
142 apprehended
Return status
Not established in the public record

April 2022

Operation Tourniquet

RaidForums Fraud and stolen data

Lead
FBI
Result
Domains raidforums.com, rf.ws, and raid.lol seized and redirected to a seizure notice; forum infrastructure taken offline.
Accountability
1 charged and 1 apprehended
Return status
Followed by a successor service

January 2020

WeLeakInfo seizure

WeLeakInfo Fraud and stolen data

Lead
FBI
Result
Domain seized and replaced with a law-enforcement notice.
Accountability
2 apprehended
Return status
Returned on replacement infrastructure

Previous Page 1 of 1 Next

Filters

Filter takedowns