breachforums Founder Receives Three-Year Prison Sentence in Cybercrime Case
Teh founder of BreachForums, a notorious online hacking forum, has been resentenced to three years in prison after an initial sentence was deemed too lenient by the Department of Justice. Conor Fitzpatrick was convicted on three counts: conspiracy to commit access device fraud, solicitation to offering access devices, and possession of Child Sexual Abuse Material (CSAM).
BreachForums rapidly became one of the largest English-language hacking forums, amassing over 330,000 members and serving as a marketplace for stolen data, compromised network access, and illicit cybercrime services. The site gained notoriety for the sale of data pilfered from telecom providers, social networks, healthcare companies, investment firms, and government agencies. increased scrutiny from U.S. authorities followed a data breach impacting D.C. Health Link, a healthcare provider for U.S. House members and their staff, where stolen data was subsequently offered for sale on the forum.
Fitzpatrick’s initial sentencing in January 2024 included time served - 17 days in jail – and 20 years of supervised release, with stipulations including home confinement, GPS monitoring, internet restrictions, and mental health treatment. However, the U.S. Court of Appeals for the Fourth Circuit overturned this sentence in January 2025, deeming it insufficient and ordering a resentencing.
The Justice Department announced the three-year prison term today, marking a significant escalation in consequences for the operation of the illicit forum. The FBI seized breachforums and arrested fitzpatrick following the D.C. Health link breach.
