Hacked Password Service Leakbase Goes Dark
Summary: Leakbase, a site that sold access to more than two billion stolen usernames and passwords from breaches at LinkedIn, MySpace and Dropbox, shut down and began redirecting visitors to haveibeenpwned.com. A source told KrebsOnSecurity the takedown may be a law enforcement sting tied to the Dutch police raid on the Hansa dark web market, though the claim was unconfirmed and Dutch police did not respond to requests for comment.
Bottom line: The service had been selling memberships since September 2016 on credentials from some of the largest breaches on record, and its exit leaves paying customers chasing refunds through an email address posted to a Twitter account whose last two messages were sent from a different client than every prior update.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026