European police shut down major stolen data marketplace

European police authorities have dismantled a criminal network running an online marketplace described as a "central hub" for trading stolen data.

Over 50 servers linked to the website called Manson Market were seized and two key suspects apprehended earlier this week as part of the cross-border operation led by German police forces, according to Europol, the EU’s law enforcement agency.

The suspects, aged 27 and 37, were arrested in Germany and Austria. Raids were also carried out in Finland, the Netherlands, and Norway, with Czech and Polish authorities joining the coordinated action on December 4th.

More than 200 terabytes of digital evidence was secured during the operation, according to Europol.

Those attempting to access the website are now met with a notice stating that all transactions, communications, and user information associated with the marketplace are in law enforcement custody.

The notice warns, “If you have engaged in any illegal activity, you are under investigation.”

The investigation began in autumn 2022 after reports of fraudulent phone calls in which scammers impersonated bank employees to extract sensitive information like addresses and security answers from victims.

“The stolen data was traced back to a specialised online marketplace that operated as a central hub for the trade of illegally obtained information,” Europol said.

The marketplace had thousands of users who could purchase stolen data filtered by region and account balance. This level of customization allowed criminals to conduct targeted fraud with greater efficiency, according to police.

Investigators also uncovered a network of phishing websites disguised as online shops and designed to trick victims into entering payment information. The stolen credentials were then sold through the marketplace, generating “significant profits” for its operators.

Europol said it was closely involved in the investigation for over two years, lending its forensic capabilities and a taskforce of dedicated data scientists to advance the case.

Earlier this year, the agency also helped shut down a giant phishing network in Spain and Latin America that victimized hundreds of thousands of people.