Skip to main content

Public record database

Takedown Index

The Internet Takedown Index documents law enforcement seizures, sinkholes, takeovers, and shutdowns of criminal internet infrastructure. Every entry traces to a cited source.

104 takedowns indexed Across 37 jurisdictions
Last reviewed August 20, 2026
Reset filters
Jurisdiction: Sweden Clear all filters
Takedown Date Category Lead organization Jurisdiction Status
Operation Deep Sentinel ID: td_2025_archetyp Jun 11, 2025 Darknet market BKA International Completed
Operation Cronos wave 1 ID: td_2024_cronos_w1 Feb 19, 2024 Ransomware NCA and FBI International Completed
Operation Tourniquet ID: td_2022_raidforums Apr 12, 2022 Fraud and stolen data FBI International Completed
EncroChat interception and shutdown ID: td_2020_encrochat Apr 1, 2020 Criminal communications French Gendarmerie and Dutch National Police International Completed
Operation Trojan Shield ID: td_2021_anom Oct 1, 2018 Criminal communications FBI and AFP International Completed

Showing 1 to 5 of 5 takedowns

5 results

June 2025

Operation Deep Sentinel

Archetyp Market Darknet market

Lead
BKA
Result
Server infrastructure seized by Dutch police; marketplace taken offline and replaced with seizure notice; approximately 7.8 million EUR in assets seized.
Accountability
8 apprehended
Return status
Later activity recorded, link to the original not established

February 2024

Operation Cronos

LockBit Ransomware

Lead
NCA and FBI
Result
34 servers seized across eight countries; source code and affiliate data obtained; more than 1,000 decryption keys recovered; more than 200 cryptocurrency wallets frozen; approximately 14,000 rogue accounts closed; leak site taken over and operated by law enforcement.
Accountability
4 charged, 3 apprehended, 2 convicted, and 3 publicly wanted
Return status
Returned under the same operators

April 2022

Operation Tourniquet

RaidForums Fraud and stolen data

Lead
FBI
Result
Domains raidforums.com, rf.ws, and raid.lol seized and redirected to a seizure notice; forum infrastructure taken offline.
Accountability
1 charged and 1 apprehended
Return status
Followed by a successor service

April 2020

EncroChat interception and shutdown

EncroChat Criminal communications

Lead
French Gendarmerie and Dutch National Police
Result
Server infrastructure in France compromised by a law-enforcement implant; more than 100 million messages intercepted; network shut down and users warned by the operator.
Accountability
No individual outcomes recorded
Return status
Later activity recorded, link to the original not established

October 2018

Operation Trojan Shield

ANOM Criminal communications

Lead
FBI and AFP
Result
Law enforcement operated the platform itself from inception; more than 27 million messages collected from roughly 12,000 devices across more than 300 criminal syndicates; network shut down at the action week.
Accountability
9 charged
Return status
Later activity recorded, link to the original not established

Previous Page 1 of 1 Next

Filters

Filter takedowns

Clear