Public record database

Takedown Index

The Internet Takedown Index documents law enforcement seizures, sinkholes, takeovers, and shutdowns of criminal internet infrastructure. Every entry traces to a cited source.

102 takedowns indexed Across 37 jurisdictions

Last reviewed August 21, 2026

Search takedowns

Category

Year

Jurisdiction

Lead organization

Sort by

Reset filters

Jurisdiction: Lithuania Clear all filters

Takedown	Date	Category	Lead organization	Jurisdiction	Status Derived from the recorded end date. A date in the past reads Completed, no date reads Ongoing. The dataset carries no separate status column.
Operation Endgame wave 1	May 27, 2024	Multi threat campaign	French Gendarmerie, BKA, Dutch National Police	International	Completed
Operation Ladybird	Jan 26, 2021	Malware and botnets	Dutch National Police, BKA	International	Completed
Operation Trojan Shield	Oct 1, 2018	Criminal communications	FBI, AFP	International	Completed
AlphaBay seizure	Jul 4, 2017	Darknet market	FBI, DEA	International	Completed
Hansa covert takeover and shutdown	Jun 20, 2017	Darknet market	Dutch National Police	International	Completed

Showing 1 to 5 of 5 takedowns

Rows per page

5 results

May 2024

Operation Endgame

IcedID, SystemBC, Pikabot, Smokeloader, Bumblebee, Trickbot Multi threat campaign

Lead: French Gendarmerie, BKA, Dutch National Police
Result: More than 100 servers disrupted or taken down; more than 2,000 domains brought under law-enforcement control; 16 location searches.
Accountability: 8 charged, 4 apprehended, and 8 publicly wanted
Return status: Not established in the public record

January 2021

Operation Ladybird

Emotet Malware and botnets

Lead: Dutch National Police, BKA
Result: Roughly 700 command-and-control servers taken over; infected machines redirected to law-enforcement infrastructure; a court-authorized uninstall module was delivered and triggered on 2021-04-25.
Accountability: 2 apprehended
Return status: Returned on replacement infrastructure

October 2018

Operation Trojan Shield

ANOM Criminal communications

Lead: FBI, AFP
Result: Law enforcement operated the platform itself from inception; more than 27 million messages collected from roughly 12,000 devices across more than 300 criminal syndicates; network shut down at the action week.
Accountability: 16 charged and 8 convicted
Return status: Later activity recorded, link to the original not established

July 2017

Operation Bayonet

AlphaBay Darknet market

Lead: FBI, DEA
Result: Marketplace servers and hidden service seized; site taken offline; assets and cryptocurrency frozen in multiple jurisdictions.
Accountability: 1 charged and 1 apprehended
Return status: Followed by a successor service

June 2017

Operation Bayonet

Hansa Market Darknet market

Lead: Dutch National Police
Result: Full covert takeover of the marketplace; servers seized in the Netherlands, Germany, and Lithuania; user credentials and transaction data collected; site replaced with seizure notice.
Accountability: 2 apprehended
Return status: Not established in the public record

Previous Page 1 of 1 Next

Takedown Index

Filters

Category Any

Year Any

Jurisdiction Lithuania

Lead organization Any

Charged Any

Apprehended Any