Cyber Security News

World’s Biggest Hacker Forum Admin Gets Resentenced to Serve Three More Years

Conor Brian Fitzpatrick, the founder and operator of BreachForums, has been resentenced to three more years in prison after a federal appeals court vacated his earlier light sentence.

Authorities say Fitzpatrick created and ran one of the world’s largest English-language hacker forums, where criminals bought and sold stolen data.

The Justice Department and FBI emphasized this new sentence underscores their commitment to pursuing cybercriminals who profit from hacking and child exploitation.

Rise and Fall of BreachForums

In March 2022, following the shutdown of RaidForums by law enforcement, Fitzpatrick launched BreachForums as a replacement platform.

 The site quickly attracted more than 330,000 members by offering access to breached databases containing sensitive information.

Visitors could purchase stolen bank account details, social security numbers, personal contact lists, and login credentials.

Investigators found at least 888 data sets on the site, totaling over 14 billion individual records of personally identifying information.

One database included contact details for roughly 200 million users of a major U.S. social networking site, while another held records for about 87,760 InfraGard members, a public–private partnership for protecting critical infrastructure.

Fitzpatrick, 22, of Peekskill, New York, pleaded guilty to one count each of access device conspiracy, access device solicitation, and possession of child sexual abuse material.

As part of his plea agreement, he forfeited over 100 domain names tied to BreachForums, more than a dozen electronic devices, and cryptocurrency proceeds from his illegal operations.

In January 2025, the U.S. Court of Appeals for the Fourth Circuit vacated his original sentence of just 17 days and remanded the case for resentencing, finding the light penalty insufficient given the severity of his crimes.

Acting Assistant Attorney General Matthew R. Galeotti of the Justice Department’s Criminal Division said the new sentence “demonstrates the Justice Department’s unwavering commitment to bringing to justice those who seek to sell stolen data to the highest bidder.”

U.S. Attorney Erik S. Siebert for the Eastern District of Virginia highlighted the incalculable damage from Fitzpatrick’s sale of stolen personal information and CSAM.

Brett Leatherman, Assistant Director of the FBI’s Cyber Division, added that the FBI will continue dismantling criminal marketplaces and prosecuting all actors involved in cybercrime.

This prosecution also involved Trial Attorney Thomas Dougherty of the Justice Department’s Computer Crime and Intellectual Property Section and Assistant U.S. Attorney Lauren Halper.

The case was brought under Project Safe Childhood, a nationwide initiative to combat child sexual exploitation online.

Since 2020, CCIPS has secured convictions of over 180 cybercriminals and obtained court orders returning more than $350 million in victim funds.

Find this Story Interesting! Follow us on LinkedIn and X to Get More Instant Updates.

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

2 days ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

2 days ago