The U.S. Department of Justice has resentenced Conor Brian Fitzpatrick, the 22-year-old former administrator of the notorious cybercrime marketplace BreachForums, to three years in federal prison. Operating under the alias “Pompompurin,” Fitzpatrick pleaded guilty to multiple charges including access device conspiracy and possession of child sexual abuse material.
## The Case Details
Fitzpatrick was initially arrested in March 2023 and entered a guilty plea four months later. His original sentence of just 17 days served was overturned by the U.S. Court of Appeals for the Fourth Circuit in January 2025, leading to this more substantial three-year prison term.
As part of his plea agreement, Fitzpatrick forfeited significant assets including over 100 domain names used to operate BreachForums, more than a dozen electronic devices, and cryptocurrency representing illegal profits from the operation.
## BreachForums: A Massive Criminal Enterprise
BreachForums emerged in March 2022 after law enforcement shut down its predecessor, RaidForums. The platform quickly became a major hub for cybercriminals to buy, sell, and trade stolen data from companies worldwide.
At its peak, the forum boasted:
– 330,000 registered members
– Over 14 billion individual records
– Extensive databases of stolen personal and commercial information
“Conor Fitzpatrick personally profited from the sale of vast quantities of stolen information,” stated U.S. Attorney Erik S. Siebert. “These crimes were so extensive that the damage is difficult to quantify.”
## Ongoing Challenges
Despite repeated law enforcement efforts, BreachForums has proven resilient, relaunching multiple times under different domains. Recent developments include:
– A complete database leak in July 2024 that exposed member information
– Claims by the hacker group ShinyHunters that the marketplace was compromised by international law enforcement
– The current forum going offline, with administrators stating they have “decided to go dark”
This case highlights the ongoing cat-and-mouse game between cybercriminals and law enforcement in the digital age, demonstrating both the persistence of criminal marketplaces and the determination of authorities to pursue justice in cyberspace.