Russia Reports Arrest of Alleged LeakBase Administrator

Summary
Russian media reported the arrest of an alleged LeakBase administrator in Taganrog. Authorities reportedly seized equipment; officials described the forum as a marketplace for stolen data used by more than 147,000 registered users.
Key points
- Russian media reported that authorities detained a Taganrog resident accused of creating and managing LeakBase since 2021.
- Authorities reportedly seized technical equipment and other evidence during a search of the suspect’s residence.
- A Russian Interior Ministry spokesperson said the forum hosted stolen account credentials, financial details and corporate documents, and had more than 147,000 registered users.
- The U.S. Department of Justice described LeakBase as one of the world’s largest hubs for trading stolen data and cybercrime tools.
- LeakBase was dismantled in a law-enforcement operation earlier this month; KELA and TriTrace linked the alias Chucky to a 33-year-old Taganrog resident.
Article Details
- Event Type
- Russian law enforcement arrest of the alleged administrator of the LeakBase stolen-data marketplace, following the forum’s dismantling in a law enforcement operation.
- Impact
- Authorities reportedly seized equipment and other evidence from the suspect’s residence. LeakBase was reported to have hosted hundreds of millions of account credentials, financial details, and corporate documents obtained through hacking. Officials said more than 147,000 registered users could trade the data and use it for fraud; the stolen credentials and financial information could also enable account-takeover attacks.
People
Threat Actors
beakdazNamed as an online alias of the threat actor described as behind LeakBase; the article does not independently establish this alias’s identity.ChuckiesNamed as an online alias of the threat actor described as behind LeakBase; the article does not independently establish this alias’s identity.ChuckyThe article describes LeakBase as the work of a threat actor using this alias. KELA and TriTrace Investigations reportedly linked Chucky to a 33-year-old Taganrog resident; the article does not establish that link as confirmed.SqlripNamed as an online alias of the threat actor described as behind LeakBase; the article does not independently establish this alias’s identity.
