Experts a novel is saying legal results, 22 -year -old former administrator of cybercrime community Brechforams A citizen from a health insurance company would abandon about $ 700,000 to settle the case, whose customer data was posted in 2023 for sale on the forum. Connor Brian FitzpatrickAka “Pommpumpurin“The device has been slated for displeasure next month after being convicted for fraud and child sexual abuse material (CSAM) to reach possession.
Breachforums a redacated screenshot of sales thread. Image: Ke-L.Com
On January 18, 2023, the Denisement of Brechforams posted for the sale of thousands of records – including social security number, date of birth, address and phone numbers – stolen from theft Nonstop healthConcorde, an insurance provider located in California.
Class-action Attorney sued Nonsstop Health, which several months after the FBI was arrested, added fitzpatric as a third party perfect for civil litigation in November 2023 and criminal allegations with an access device fraud and CSAM possession. In January 2025, Nonsstop $ 1.5 million agreed to pay To deal with class action.
Jill fertel Is a former prosecutor who runs cyber litigation exercises Shiranani and VernerThe law firm that represented Nonsstop Health. Fertel told krebsonsecurity that this is the first and only case where anyone related to a cyber criminal or security incident was really nominated in civil litigation.
Furtel said, “Civil plaintiff is unlikely to see the money seized from the danger actors involved in the incident, which is made available to those affected by the breech,” Furtel said. “What we could do best was providing this money in class, but it is still upset with the members of the class who are impressed to make that claim.”
Mark Rasch Is a former federal prosecutor who now represents Unit 221BA cyber security firm located in New York City. Rasach said that he does not doubt that citizen settlement associated with fitzpatrick’s criminal activity is a novel legal development.
“It is rare in these civil affairs that you know the actor with the danger included in the breech, and it is also rare that you hold them with enough resources to be able to catch them with enough resources.”
Despite accepting more than 600 CSAM images and to keep the breechforam of individually operations, Fitzpatrick was Sentenced in January 2024 And 20 years old. Federal prosecutors objected, arguing that his sentence failed to adequately reflect the severity of his crimes or serve as a preventive.
A fraction of a pre-santing report for fitzpatrick indicates that their equipment had more than 600 CSAM images.
Actually, the same month he was sentenced to fitzpatrick. Was re -located ,
Federal prosecutors said Inappropriately innocent For the crimes for whom he had convicted, saying that his petition was “to BS” and “he wanted to fight it.” Fedes said that Fitzpatrick joked with his friends about selling data to foreign governments, asking a user to “become a foreign property for China or Russia” and “sell government secrets”.
In January 2025, a federal appeal court agreed with the government’s assessment, Fitzpatrick’s punishment And ordered him to be angry on June 3, 2025.
Fitzpatrick launched Breachforums to convert to March 2022 RaidA equally popular crime forum which was infiltrated and closed by the FBI last month. As an administrator, his transformation ego Pompumpurin served as a middleman, personally reviewed all databases for sale on stage and offered an Escro service to those interested in buying stolen data.
An annual book of Fitzpatric was detected by The Yonkars Times.
The new site quickly attracted more than 300,000 users, and facilitated selling databases stolen from hundreds of hacking victims, including some largest consumer data violations in recent history. In May 2024, the rebirth of violations by the FBI and international partners was confiscated. Still more relaonals of the stage happened after that, Most recent disintegration Last month.
As Krebsanusurity reported last year in dark nexus between disadvantage groups and com, CSAM content is rapidly common for federal investigators when searching for the devices seized from cyber criminal suspects. While CSAM’s only occupation is a serious federal crime, all those caught with CSAM are necessarily its manufacturer or distributor. Furtel stated that some cyber criminal communities require new entry to share CSAM content, as the way to prove that they are not a federal investigator.
“If you are going into the deepest corners of the Internet, then how do you prove that you are not law enforcement,” Furtel said. “Law enforcement will never share that material. It would be criminal for me as an prosecutor, if I have received those types of images and have them.”
Further reading: Agreement between Fitzpatric and Nonstop (PDF).
