Loading story…
U.S. authorities arrested Conor Brian Fitzpatrick, the founder and administrator of BreachForums, after describing the site as one of the world’s largest cybercrime marketplaces for stolen data and hacking services. The Justice Department said the 20-year-old operated under the alias Pompompurin and used the forum to facilitate the sale and distribution of breached databases, credentials, and other illicit services before law enforcement disrupted the platform’s operations in 2023.
Court records show Fitzpatrick was sentenced on January 19, 2024 to time served and concurrent supervised release terms, including 20 years on one count, with extensive restrictions on his future activity. Conditions include two years of home arrest with GPS monitoring, a one-year internet ban, broad monitoring and search of computers and electronic devices, mental health and sex-offender treatment, polygraph testing, limits on contact with minors, and sex-offender registration requirements; separate reporting also noted he was jailed again after violating pretrial release conditions before sentencing.
See the reporting duties and controls this puts on the clock.
5 events from the most recent confirmed update back to the earliest known activity.
Paris police said they had arrested five alleged BreachForums administrators, indicating a new law-enforcement action targeting the forum's leadership beyond the original founder's case. The arrests represented a further escalation in efforts against the cybercrime platform.
At a federal sentencing hearing, Conor Brian Fitzpatrick was sentenced to time served on three counts and placed on supervised release, including a 20-year term on one count running concurrently with shorter terms on others. The sentence imposed extensive conditions such as home arrest with GPS monitoring, internet and device restrictions, treatment requirements, and sex offender registration.
After sentencing, Fitzpatrick was reported jailed again for flouting pretrial or release-related court rules, marking a new enforcement action in the case. This reflected noncompliance with court-imposed conditions following the earlier prosecution.
U.S. authorities arrested Conor Brian Fitzpatrick, the 20-year-old founder and administrator of BreachForums, and announced disruption of the forum's operations. The Justice Department said he faced charges tied to operating the cybercrime marketplace.
On 2023-03-15, U.S. law enforcement arrested Connor Brian Fitzpatrick, alleging he was 'Pompompurin,' the owner and administrator of BreachForums. Court records said he admitted the identity during arrest and he was released on a $300,000 bond with travel and contact restrictions pending a March 24 court appearance.
See what this changes for your reporting obligations and which controls it puts on the clock.
8 references tracked. Mallory keeps watching after this page renders.
courtlistener.com
Open sourcetheregister.com
Open sourcebleepingcomputer.com
Open sourcetheregister.com
Open sourceweb.archive.org
Open sourcejustice.gov
Open sourceweb.archive.org
Open sourcebleepingcomputer.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Conor Fitzpatrick, aka 'Pompompurin', founder of BreachForums, was resentenced to three years in prison after a federal appeals court vacated his previous lenient sentence. Fitzpatrick pleaded guilty to conspiracy to commit access device fraud, solicitation for access devices, and possession of child sexual abuse material. The resentencing follows evidence of repeated violations of pretrial release and the forum's role in facilitating large-scale data breaches and cybercrime.
Jun 29, 2026Conor Fitzpatrick, known as 'Pompompurin' and founder of BreachForums, was sentenced to three years in prison by a Virginia federal court. Prosecutors had sought a much longer sentence for his role in facilitating the sale of stolen data and possession of child sexual abuse material. Fitzpatrick's sentencing follows his 2023 guilty plea and a prior, lighter sentence that was overturned on appeal.
Jun 29, 2026
Alan Bill, a 33-year-old Slovak national, was sentenced in the United States to 200 months in federal prison for helping operate **Kingdom Market**, a major darknet marketplace that sold illegal drugs and cybercrime-related goods. Bill pleaded guilty to conspiracy to distribute controlled substances after admitting he provided web administration, managed cryptocurrency tied to the site, and promoted the marketplace on Reddit, Dread, and other social platforms. Prosecutors said Kingdom Market operated from March 2021 through December 2023 and facilitated thousands of transactions involving narcotics, stolen financial data, fake identity documents, counterfeit currency, and malware. Investigators said undercover purchases on the platform included fentanyl, methamphetamine, and a fake U.S. passport, while seized server records showed trafficking in heroin and purported Oxycodone cut with fentanyl. Bill was arrested at Newark Liberty International Airport on December 15, 2023, shortly before German authorities seized the marketplace’s servers and shut it down in a multinational operation involving the United States, Germany, Switzerland, Moldova, and Ukraine. The court rejected Bill’s effort to downplay his role, finding he acted as a leader in the conspiracy, and ordered the forfeiture of multiple cryptocurrency assets and the domains `Kingdommarket[.]live` and `Kingdommarket[.]so`.
Jun 29, 2026