Feds Seized the SSNDOB Marketplace

Feds announced the seizure of the SSNDOB Marketplace.

Federal law enforcement agencies seized a series of websites called the SSNDOB Marketplace, which “operated for years and were used to sell personal information, including the names, dates of birth, and Social Security numbers.” The SSNDOB Marketplace had listings for the personal information of approximately 24 million people living in the United States. The Marketplace generated more than $19 million in revenue.

A seizure banner visible on ssndob.ws — Visitors of some of the seized sites are met with a seizure banner.

“Identity theft can have a devastating impact on a victim’s long-term emotional and financial health. Taking down the SSNDOB website disrupted I.D. theft criminals and helped millions of Americans whose personal information was compromised,” said Special Agent in Charge Darrell Waldon, IRS-CI Washington, D.C. Field Office. “Special agents with IRS-CI’s D.C. Cyber Crimes Unit will continue to work with the U.S. and international law enforcement community to end these complex scams, regardless of where the money trail leads them.”

A screenshot of the SSNDOB Marketplace prior to the seizure — SSNDOB Marketplace | Source: notorious doxing gang “Brian Krebs”

The administrators of the sites created advertisements on “darkweb criminal forums.” According to an announcement from the United States Attorney’s Office for the Middle District of Florida, they provided support to customers. The administrators also took steps to conceal their identities and “thwart detection of their activities” by using servers in different countries and allowing customers to pay for services with cryptocurrency.

On June 7, 2022, seizure orders were executed against the Marketplace’s domain names, including ssndob.ws, ssndob.vip, ssndob.club, and blackjob.biz.

“These seizures demonstrate the FBI’s strong working relationship with our international partners in disrupting malicious cyber activity,” said FBI Tampa Special Agent in Charge David Walker. “Dismantling illicit marketplaces that threaten the privacy and security of the American public is a priority of the FBI.”

SSNDOB Marketplace, A Series Of Websites That Listed More Than 20 Million Social Security Numbers For Sale, Seized And Dismantled In International Operation | archive.is, archive.org, justice.gov

17 Comments

It's Called We Engage In A Mild Amount of Tomfoolery

8906dab1

632b90a0 Wed, Jun 8, 2022

fuck brain krebs and the pedofiles they work with

42b0000c

6eca3ee0 Wed, Jun 8, 2022

bruh stfu, you sound like a fucking pedo yourself

1b7f3a95

2e664ab0 Wed, Jun 8, 2022

SHUT UP YOU FUCKING COON ISRAEL IS OUR GREATEST ALLY 5 YEAR OLDS GETTING MOLESTED IS JUST PART OF LIVING IN A MODERN SOCIETY- brian krebs

9dbb537c

e5006970 Wed, Jun 8, 2022

fuck brain krebs and the pedofiles they work with

56d67f6a

928dd730 Wed, Jun 8, 2022

Impressive take down, those folks had been around for almost a decade, compromising an astonishing 7% of the US population, there is another obvious site too that is effectively the same 🤖 . Very little here to work with forensically, sounds like they identified the locations of the domain hosting companies and were able to successfully leverage seizure negotiations with the countries were the servers were located, AWS would be the easy answer to guess here, so many availability zones across the world, high speed, client side encryption, use actual hardware instead of just vmz, lots of illicit activities occur daily on AWS or Microsoft or Google anyway… in conclusion a clear violation of the service agreement you sign with these various web hosting companies. NO ARRESTS!

f1f923e8

fcad52a0 Wed, Jun 8, 2022

Did you read at all? They didn’t get taken down. They just got some URLs seized. They already have spun up new URLs and the site is still active.

6f52a2b3

3c7eb3e0 Wed, Jun 8, 2022

*** Correction, yes I did not read all of that, my heart was broken for a second 🫡

2505a8e4

aa3714e0 Wed, Jun 8, 2022

I was also thinking if they back up that database, which based on their freedom, they did, the vulnerability is the same, just need a new host to get sales up and running, it’s not like any information was exposed to potential customers… goddamn

92353d34

23cf1800 Wed, Jun 8, 2022

but the blind man s33

60d5bd6c

c40e8a90 Wed, Jun 8, 2022

Hello everyone!

My name is Brian Krebs and I love children.
That’s all.

Sincerely, Brian Krebs.

e96d101b

5de0c340 Wed, Jun 8, 2022

shoulda used a properly configured psense system and tested with Shields UP!

Sincerely,

Steve Gibson Research Corporation: SpinRite!

ad5556de

3bfad350 Wed, Jun 8, 2022

2021

Number of legal orders: 6,243
Contested orders: 1,323
Orders complied with: 4,920  <-- I wonder, oh wonder

particle accelerated too

064304f8

41ba7960 Wed, Jun 8, 2022

DNL needs to third party verify if the site is up on separate mirrors after the takedown, they got banners on this 1 ???

3a7ad5f6

4333dab0 Thu, Jun 9, 2022

Hello I love kids :3

97966849

adcc9fd0 Thu, Jun 9, 2022

longpig is not a pedo, he work good and he have a nice forum.

d0201c72

a3cec600 Sat, Jun 11, 2022

Thats not even the orginal ssn dob still up and running

c3ea8548

35387ec0 Wed, Jun 15, 2022

Can you believe it? The feds can take down clearnet sites.
This is some next level Silk Road takedown operation.

I wonder if they also are allowed to break into your home if you scream “I am not in here! I’m on vacation!”
Probably not. No cops ever break down doors like that.

New comments are disabled after ten days in an attempt to limit spam.