Notorious Hacker ‘IntelBroker’ Arrested

A 25-year-old British man named  Kai West has been charged by US authorities for allegedly operating under the alias "IntelBroker," a notorious figure in the cybercrime world responsible for a series of high-profile data breaches. Arrested in France in February.

West now faces extradition to the United States, where he is accused of orchestrating cyber attacks that caused over £18 million in damages worldwide.

Alleged Leader of Cybercrime Kingpin

US federal prosecutors in the Southern District of New York have indicted West on multiple charges, including conspiracy to commit computer intrusions, wire fraud, and accessing protected computers to obtain information. Operating under the pseudonyms "IntelBroker" and "Kyle Northern," West is alleged to have led a hacking group known as "The Boys," targeting over 40 organisations, including major corporations and a US healthcare provider.

West’s activities, spanning from December 2022 to February 2025, involved infiltrating secure networks to steal sensitive data, such as customer lists and patient information, which was then sold or distributed for free on dark web forums, primarily BreachForums.

Prosecutors claim West offered stolen data for sale 41 times and shared it for free or forum credits in 117 instances between 2023 and 2025, causing an estimated $25 million (£18.2 million) in damages.

High-Profile Targets & BreachForums Connection

IntelBroker gained notoriety for claiming responsibility for breaches at major organisations, including Advanced Micro Devices (AMD), Cisco Systems, Hewlett Packard Enterprise, Europol, and Facebook Marketplace, though some claims were reportedly exaggerated. A significant breach in March 2023 targeted DC Health Link, a health insurance marketplace used by members of the US Congress, exposing sensitive personal data.

West allegedly operated as an administrator of BreachForums, a prominent cybercrime marketplace, between August 2024 and January 2025.

The forum, described as an "Amazon for hackers," facilitated the sale and extortion of stolen data. French authorities arrested four other suspected BreachForums administrators in Paris last week, marking a broader crackdown on the platform.

FBI’s Bitcoin Operation

West’s downfall came through a critical error in his operational security. Known for using Monero, a privacy-focused cryptocurrency, IntelBroker was lured into accepting a $250 Bitcoin payment from an undercover FBI agent for stolen data. This transaction, traced to an account linked to West, helped investigators confirm his identity.

Additional evidence included IP address overlaps and YouTube videos watched by West that were later posted by IntelBroker on BreachForums.

Previous Criminal Activities

West’s alleged criminal history extends beyond cybercrime. In 2018, at the age of 18, he was reportedly arrested by UK police for orchestrating hoax bomb threats targeting thousands of schools. This earlier incident suggests a pattern of disruptive behaviour predating his activities as IntelBroker.

Facing Severe Penalties

Currently detained in France, West awaits extradition to the US, where he faces up to 20 years in prison for each wire fraud charge and five years for hacking-related offences. US Attorney Jay Clayton described the IntelBroker alias as responsible for "millions in damages to victims around the world," underscoring the FBI’s commitment to pursuing cybercriminals globally.

FBI Assistant Director Christopher G. Raia called West a "serial hacker" whose actions profited millions in illicit funds. The case highlights international cooperation between US and French authorities, with the latter’s arrests of BreachForums operators signaling a robust response to cybercrime networks.

The arrest of West and other BreachForums operators marks a significant milestone in combating global cybercrime.

Ensar Seker, chief information security officer at SOCRadar, described the apprehension as a "significant milestone" in disrupting a resilient cybercrime marketplace. However, experts note that while IntelBroker’s claims were sometimes overstated, the scale of the operation underscores the persistent threat of data breaches to organisations worldwide.

As West’s extradition approachess, the case serves is a warning to cybercriminals that law enforcement agencies are increasingly adept at tracking and prosecuting those hiding behind online aliases. The takedown of IntelBroker and the continued targeting of platforms like BreachForums reflect a global effort to curb the growing menace of cybercrime.

 Mail Online  |  TechRepublic  |   News9Live  |  DarkReading  |  Computer Weekly  |  Hackread  |  CoinTelegraph

Image: Ideogram

You Might Also Read: 

Prolific Hacking Gang DieNet Presents A Serious Threat:


If you like this website and use the comprehensive 8,000-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

« Cybersecurity: The New Catalyst For SMB Growth 

CyberSecurity Jobsite
Check Point

Directory of Suppliers

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

TBG Security

TBG Security

TBG provides a portfolio of services including cyber security, compliance and continuity solutions.

Spiceworks

Spiceworks

Spiceworks provide a range of free apps for IT professionals including network inventory, network monitor, and help desk.

Altius IT

Altius IT

Altius IT reviews your website for security vulnerabilities and provides a report identifying vulnerabilities and recommendations to make secure.

Singapore Cybersecurity Consortium

Singapore Cybersecurity Consortium

Singapore Cybersecurity Consortium was created to encourage use-inspired research, training and technology awareness in cybersecurity.

GTB Technologies

GTB Technologies

GTB Technologies is a cyber security company that focuses on providing enterprise class data protection and data loss prevention solutions.

M2SYS

M2SYS

M2SYS is a worldwide leader in identification and authentication solutions.

CyberSAFE Malaysia

CyberSAFE Malaysia

CyberSAFE Malaysia is an initiative to educate and enhance the awareness of the general public on the technological and social issues and risks facing internet users.

iZOOlogic

iZOOlogic

iZOOlogic protects hundreds of the world’s leading brands, across banking, finance and government from cybercrime. We provide strong cyber defence solutions to protect client digital assets.

HacWare

HacWare

HacWare is a data driven cybersecurity awareness product that leverages machine learning and behavior analytics help IT professionals combat phishing.

E2E Technologies

E2E Technologies

E2E Technologies are a proactive, SLA-beating, managed service provider that busts the common stereotypes surrounding IT.

Unisys

Unisys

Unisys is a global information technology company providing industry-focused solutions integrated with leading-edge security to clients in the government, financial services and commercial markets.

Eqlipse Technologies

Eqlipse Technologies

Eqlipse Technologies provides products and high-end engineering solutions to customers in the Department of Defense and Intelligence Community.

Security Risk Advisors (SRA)

Security Risk Advisors (SRA)

Security Risk Advisors deliver cybersecurity services to leading companies in the Financial Services, Healthcare, Pharmaceuticals, Technology and Retail industries.

IT Voice

IT Voice

IT Voice specializes in Managed IT and VoIP solutions. Our focus is simplifying the technology so our customers can stay focused on what they do best.

CyXcel

CyXcel

CyXcel is a cyber security consulting business grounded in the law which natively fuses crises, legal, technical, and consulting expertise digital networks, information and operational technology.

InterSources

InterSources

InterSources is a trusted partner, leading the way in Cloud Security, Cybersecurity, PLG Consulting, Digital Transformation, and Professional Services.