On Thursday, January 16th, 2020 the FBI and US Department of Justice announced that they had seized the internet domain name WeLeakInfo.com. The website served as a breach notification service, similar to HaveIBeenPwned, with one key difference. Unlike HaveIBeenPwned, WeLeakInfo granted subscribers access to clear text passwords leaked through breaches. This seizure is part of a larger law enforcement action taken by the FBI, the US Attorney’s Office, the Department of Justice’s Computer Crime and Intellectual Property Section, the UK’s National Crime Agency, the Netherland’s Police Corps, the German BKA, and the Police Service of Northern Ireland.
Analyst Notes
As the passwords on WeLeakInfo were found in publicly available breaches, any victim of past breaches should ensure that their passwords have been changed since the breach. Additionally, the FBI is asking that any individuals with any information concerning WeLeakInfo.com or its owners and operators should file a complaint with the FBI’s Internet Crime Complain Center at https://www.ic3.gov/complaint/default.aspx
More information can be found at https://www.justice.gov/usao-dc/pr/WeLeakInfocom-domain-name-seized.
https://www.justice.gov/usao-dc/pr/WeLeakInfocom-domain-name-seized
