A New York man has been resentenced to three years in prison for creating and operating BreachForums, one of the world’s largest cybercrime marketplaces, and for possessing child sexual abuse material (CSAM).
Conor Brian Fitzpatrick, 22, of Peekskill, New York, pleaded guilty to access device conspiracy, access device solicitation, and possession of CSAM. As part of his plea deal, Fitzpatrick agreed to forfeit over 100 domain names, dozens of electronic devices, and cryptocurrency linked to the scheme.
Launched in March 2022, BreachForums quickly became the go-to hub for hackers after the FBI seized RaidForums. The site grew to more than 330,000 members and offered at least 888 datasets of stolen information, containing more than 14 billion records. Victim data included Social Security numbers, bank details, and account credentials. Among the breaches was information on 200 million users of a U.S. social networking site and nearly 88,000 members of InfraGard, an FBI–private sector partnership protecting critical infrastructure.
Fitzpatrick was initially sentenced to time served (17 days), but in January 2025, the U.S. Court of Appeals for the Fourth Circuit vacated that decision, ordering a resentencing. “Today’s sentence demonstrates the Justice Department’s unwavering commitment to bringing to justice those who seek to sell stolen data to the highest bidder,” said Acting Assistant Attorney General Matthew R. Galeotti.
The FBI’s Washington Field Office led the investigation, with prosecution by the Justice Department’s Computer Crime and Intellectual Property Section (CCIPS) and the U.S. Attorney’s Office for the Eastern District of Virginia.





