Conor Brian Fitzpatrick, a 22-year-old from New York, has been sentenced to three years in federal prison for his role in creating and managing BreachForums, one of the world’s largest cybercriminal marketplaces. This sentencing, handed down on September 16, 2025, follows a prior decision by the U.S. Court of Appeals for the Fourth Circuit, which vacated his initial sentence of 17 days served and mandated a new hearing.
Background on BreachForums
Launched in March 2022 as a successor to the seized RaidForums, BreachForums quickly became a central hub for cybercriminal activities. The platform attracted over 330,000 registered users and specialized in the sale of stolen personally identifiable information (PII), including Social Security numbers, bank account details, and authentication tokens from significant data breaches. The Department of Justice reported that the forum provided access to 888 datasets containing more than 14 billion individual records of stolen information.
Notable Data Breaches Facilitated by BreachForums
Among the significant breaches associated with BreachForums were:
– A database containing contact information for approximately 200 million users of a major U.S. social networking platform.
– Sensitive details of 87,760 InfraGard members, a partnership between the FBI and private sector entities focused on critical infrastructure protection.
The forum also trafficked credentials from telecommunications providers, healthcare services, and internet service providers, posing substantial risks to both individuals and organizations.
Legal Proceedings and Sentencing
Fitzpatrick pleaded guilty to charges including access device conspiracy (18 U.S.C. ยง 1029), access device solicitation, and possession of child sexual abuse material (CSAM). As part of his plea agreement, he forfeited over 100 domain names linked to BreachForums, more than a dozen electronic devices used in the criminal enterprise, and cryptocurrency proceeds generated from the illegal marketplace.
The Computer Crime and Intellectual Property Section (CCIPS) led the prosecution, which has secured convictions of over 180 cybercriminals since 2020 and facilitated the return of over $350 million to victims. Acting Assistant Attorney General Matthew R. Galeotti emphasized the Justice Department’s commitment to dismantling cybercriminal infrastructure, stating that operators of similar forums should expect relentless investigation and prosecution.
Impact on the Cybercrime Landscape
The sentencing of Fitzpatrick underscores the ongoing efforts by law enforcement to combat cybercrime and disrupt illicit online marketplaces. The FBI’s Washington Field Office conducted the investigation under its Cyber Division’s ongoing efforts to combat dark web marketplaces that enable data theft, fraud, and other cybercrimes targeting critical infrastructure and private citizens.
