Breachforums Boss to Pay $700k in Healthcare Breach
Summary: Conor Brian Fitzpatrick, the 22-year-old former administrator of Breachforums known as "Pompompurin," will forfeit nearly $700,000 to settle a civil lawsuit from Nonstop Health, a Concord, Calif. insurer whose customer data was posted for sale on the forum in January 2023. Nonstop Health agreed in January 2025 to pay $1.5 million to settle the related class action, and Fitzpatrick is slated for resentencing on June 3, 2025 after a federal appeals court vacated his earlier sentence of time served and 20 years of supervised release.
What you should know: A lawyer involved in the case called it the first and only instance where a cybercriminal was named in civil litigation over a breach, and even then the $700,000 goes to the class only if affected members file claims - money that civil plaintiffs rarely see from threat actors at all.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026