BreachForums Founder Conor Fitzpatrick Resentenced to 3 Years in Prison

Conor Brian Fitzpatrick, the founder of the hacking forum BreachForums, has been resentenced to three years in prison after a federal appeals court vacated his initial 17-day sentence. Learn how his site facilitated the sale of over 14 billion stolen records.

A New York man who ran one of the world’s biggest cybercrime and hacker forums, BreachForums, has been resentenced to three years in prison, according to the US Department of Justice (DoJ).

Conor Brian Fitzpatrick, aka Pompompurin, 22, was the founder and administrator of BreachForums, where criminals bought and sold stolen login credentials, databases, network access, malware and other illegal items.

In July 2023, Fitzpatrick pleaded guilty to charges, including conspiracy to traffic stolen information and possessing CSAM. Despite the serious crimes, he was initially sentenced to only 17 days in prison, which he had already served, and 20 years of supervised release. This light sentence was given due to his youth and an autism diagnosis.

However, prosecutors immediately appealed, and in January 2025, a US appeals court overturned the sentence. The court noted Fitzpatrick’s “lack of remorse” and how he had violated his bail by using a VPN to access online chatrooms. Hackread.com had previously reported on these concerns, which led to the appeals court’s decision.

Fitzpatrick launched BreachForums in March 2022 after law enforcement took down a similar site called RaidForums. His site quickly grew to over 330,000 members, hosting more than 14 billion stolen records, including sensitive personal data like social security numbers and banking details.

According to the DOJ’s press release, in a key part of the investigation, undercover FBI agents infiltrated the site in July 2022, purchasing records for 15 million Americans, which ultimately led to Fitzpatrick’s arrest in March 2023 at his home in Peekskill, New York. Shortly after his arrest, the FBI seized BreachForums, taking the site offline.

Court documents show that Fitzpatrick personally profited from the site, earning approximately $698,000. The platform also served as a hub for hackers to buy and sell stolen data, with Fitzpatrick himself often acting as a middleman.

US Attorney Erik S. Siebert of the Eastern District of Virginia stated that the damage from these crimes is hard to measure, and the human impact of the child abuse material is impossible to calculate.

In addition to his prison time, Fitzpatrick must also give up over 100 domain names, electronic devices, and any cryptocurrency he earned from his illegal operation. This case was part of the DoJ’s nationwide Project Safe Childhood initiative, which was launched in May 2006 to combat the sexual exploitation and abuse of children.