**Young hacker who ran one of the world’s largest cybercrime forums receives harsher sentence following government appeal**
Conor Brian Fitzpatrick, the 22-year-old mastermind behind the infamous BreachForums hacking platform, has been sentenced to three years in federal prison after an appeals court overturned his original lenient sentence.
## The Rise and Fall of “Pompompurin”
Operating under the alias “Pompompurin,” Fitzpatrick created BreachForums in 2022 as a successor to RaidForums after the FBI shut down the previous platform. The New York resident quickly built what became one of the largest English-language hacking forums, attracting over 330,000 members worldwide.
BreachForums served as a digital marketplace for cybercriminals to:
– Trade and sell stolen personal data
– Offer access to compromised corporate networks
– Leak sensitive information from major organizations
– Provide various illegal cybercrime services
The platform became notorious for hosting stolen data from telecommunications companies, social media platforms, healthcare providers, investment firms, and government agencies.
## Arrest and Legal Proceedings
Fitzpatrick’s criminal enterprise came to an end on March 15, 2023, when FBI agents arrested him. During questioning, he immediately admitted to being Pompompurin and running BreachForums. The arrest came after increased government pressure following a high-profile breach of D.C. Health Link, which provides healthcare services to U.S. House members and their families.
In July 2023, Fitzpatrick pleaded guilty to three serious charges:
– Conspiracy to commit access device fraud
– Solicitation for offering unauthorized access devices
– Possession of child sexual abuse material
## Violation of Release Conditions
Despite being released pending sentencing, Fitzpatrick violated his pretrial conditions by secretly accessing the internet using unmonitored devices and VPN services to hide his activities. Court documents reveal he has still not surrendered these unauthorized devices to authorities.
## Sentencing and Appeal
Initially, despite prosecutors seeking over 15 years in prison, Fitzpatrick received a surprisingly lenient sentence in January 2024: time served (17 days in jail) plus 20 years of supervised release with strict conditions including home confinement and internet restrictions.
The Department of Justice successfully appealed this sentence, arguing it was insufficient. In January 2025, the U.S. Court of Appeals for the Fourth Circuit agreed, vacating the original sentence and ordering a new hearing.
Today’s resentencing resulted in a three-year prison term, representing a significant increase from the original punishment and sending a stronger message about the consequences of operating large-scale cybercrime platforms.
This case highlights the ongoing battle between law enforcement and cybercriminals, demonstrating that even young offenders who facilitate massive data breaches will face serious consequences for their actions.