Federal prosecutors in the Southern District of New York have unsealed a four-count indictment charging 25-year-old British national Kai West—allegedly the notorious “IntelBroker”—with orchestrating a multi-year data theft and sale operation via BreachForums, leading to over $25 million in estimated victim losses .

⚙️ The Man Behind the Mask

• Identity & alias: Kai West, also known as “IntelBroker” and “Kyle Northern,” has been tied to a string of large-scale breaches and data leaks across corporate and government networks.

• Operations: Between January 2023 and February 2025, West conducted 41 sales of stolen data and released 117 free dumps on BreachForums and partner outlets. The total revenue from direct sales reached approximately $2.5 million, with cumulative damages exceeding $25 million.

🛡️ Scope of Impact

West’s hacking targets included a U.S. telecommunications provider, municipal healthcare systems, ISPs, and major corporate entities—spanning over 40 victims. Notably, he sold data from a healthcare provider involving tens of thousands of patient records and breached internal systems at firms like Hewlett-Packard and Cisco.

💰 The Bitcoin “Control Buy”

An FBI undercover agent purchased stolen data from West for $250 in Bitcoin. Blockchain tracing linked the transaction to a wallet registered on the UK-based Ramp platform under West’s real name via a driver’s license—a connection later verified through an email tied to both his Coinbase account and VPN use.

🧑‍⚖️ Charges & Legal Path

The indictments include:

1. Conspiracy to commit computer intrusions

2. Conspiracy to commit wire fraud

3. Accessing a protected computer to defraud

4. Wire fraud
   West faces potential sentences of up to 20 years per count, depending on conviction.

🌐 International Cooperation

• Arrest & extradition: West was arrested in France in February 2025 and remains in custody. The U.S. has formally initiated extradition proceedings.

• French assistance: France’s Cybercrime Brigade (BL2C) also arrested four suspected BreachForums associates—aliases include “ShinyHunters,” “Hollow,” “Noct,” and “Depressed”.

🧭 Context: BreachForums Resurgence

BreachForums, originally launched in 2022 and led by “pompompurin,” experienced a revival under "IntelBroker" after prior takedowns in 2023 and 2024. The site became a focal point for criminal data trades and hacking discourse. IntelBroker officially owned the forum from August 2024 until January 2025, just before his arrest.

🔐 Why This Case Matters

• Crypto tracing breakthrough: Despite attempts to conceal transactional data via Monero and Bitcoin, law enforcement effectively traced the money flow back to West’s identity.

• Global law enforcement synergy: The combined efforts of the FBI, U.S. DOJ, French police, and international data trails demonstrate the growing capability to dismantle cybercrime networks.

• Cybercrime resurgence dampened: The disruption of BreachForums and arrests of key figures sends a stern message to the cybercriminal ecosystem.

Kai West—alleged mastermind behind “IntelBroker”—stands accused of leading a prolific data theft campaign via BreachForums, driving over $25 million in damage worldwide. Following a Bitcoin sting, blockchain tracing, and international arrests, he now faces extradition to the U.S. and multiple severe charges as authorities aim to extinguish a key node in the modern data breach underworld.