May 18, 2026, 11:25 AM
LeakBase Dismantled and Administrator Arrested: Critical OPSEC Lessons In an unprecedented coordinated operation involving 14 Western countries (FBI, Europol and partners), the LeakBase forum — one of the world’s largest platforms for trading stolen data — was taken down between March 3–4, 2026. Servers seized, over 142,000 users exposed (IPs + 215,000+ private messages), and 16,000 leaked databases circulating since 2021 are now in law enforcement hands. On March 25, 2026, Russian police arrested the forum’s creator and main administrator in Taganrog: Artem Igorevich Kuchumov, 33, known by the handles Chucky (also Beakdaz, Sqlrip, and Chuckies). Attribution confirmed by KELA and TriTrace OSINT analyses. Major OPSEC Failures That Led to His Arrest:
Threat Intelligence Insights: Even while following the classic Russian rule (“don’t steal from RU”), Kuchumov ignored basic digital hygiene. The biggest threat wasn’t international cooperation — it was his own 10-year digital footprint. Anonymous tools like Njalla offered no protection against elementary OPSEC errors. This case is a live textbook: anonymity isn’t a one-time setup, it’s daily discipline and strict compartmentalization. Clear message: no one is invisible when your history does the doxxing.
- Reused the same pseudonyms for over 10 years (Beakdaz since 2013 → Chucky), directly linked in Doxbin leaks.
- Official forum Telegram (@chuckybhf) registered to his personal phone number.
- Nickname-laden emails ([email protected] and [email protected]) used for KYC transactions: SIM cards, Njalla hosting payments, and passport-required registrations.
- Unnecessary exposure on VK profile (“Darknet” in inspirations section) and local Taganrog interactions.
- Zero compartmentalization between real identity and dark web activities.
Threat Intelligence Insights: Even while following the classic Russian rule (“don’t steal from RU”), Kuchumov ignored basic digital hygiene. The biggest threat wasn’t international cooperation — it was his own 10-year digital footprint. Anonymous tools like Njalla offered no protection against elementary OPSEC errors. This case is a live textbook: anonymity isn’t a one-time setup, it’s daily discipline and strict compartmentalization. Clear message: no one is invisible when your history does the doxxing.
