KillSec leak site and five servers reportedly seized and shut down

Seizing a leak site and alleged stolen-data infrastructure

According to the report, authorities from Belgium, the United States, Finland, Germany, Greece, the Netherlands, Romania, Spain, Switzerland, and the United Kingdom coordinated the September 30 action. Europol said the investigation identified a 16-year-old as KillSec’s suspected main operator. Hamburg Police said its infrastructure investigation led to the identification and shutdown of five servers, including the group’s main server. The report says eight properties in Greece, Romania, Spain, and the United Kingdom were searched, and at least 110 terabytes of stolen data were seized.

The report describes KillSec as active since around 2024, but it does not provide a directly comparable measure of the group’s operations before and after the action.

The reported operation placed KillSec’s leak site, five servers, and at least 110 terabytes of stolen data under law-enforcement control, while three suspects were provisionally arrested.

The reported action targets both the group’s public extortion channel and infrastructure allegedly used to hold stolen data. Investigators cautioned that their attack figures may change as seized evidence is analyzed.