WeLeakInfo

WeLeakInfo, headquartered in the Netherlands, operated as an illicit data brokerage service that facilitated the exchange of personal data. The service functioned as a platform where buyers and sellers could trade sensitive information such as identities, credentials, and financial details. Its activities were conducted outside legal frameworks, making it a target for law enforcement interventions. The organisation’s core offering revolved around providing access to datasets that were sourced from various breaches and leaks.

In March 2021, a security incident exposed the personal data of approximately 24,000 customers associated with WeLeakInfo. The leaked information included full names, IP addresses, physical addresses, payment details, and transaction records. This breach originated from an unseized domain linked to the service’s payment processor, which the attacker claimed to have exploited. The exposure highlighted the scale of the service’s user base and the sensitivity of the data it handled.

Prior to the 2021 leak, WeLeakInfo had already been shut down by law enforcement, rendering it a defunct entity at the time of the breach. The incident underscored the risks posed by inadequate domain management following enforcement actions against cybercrime platforms. By retaining control of a domain tied to its payment infrastructure, the service left a residual attack surface that could be leveraged for further misuse. These factors illustrate how operational security lapses can persist even after a service is ostensibly taken offline.