Dutch police identify 126 suspects on Cracked.io, one of them was an 11-year-old

Dutch police have summoned at least 20 users of the hacking forum Cracked.io, a notorious illicit marketplace seized by the FBI. In total, 126 users from the Netherlands were identified, one of them as young as 11. Other countries may follow suit.

The platform for cybercriminals didn’t protect its users’ data: investigations into usernames and email addresses of the seized Cracked.io platform identified 126 Dutch users.

“Ultimately, 126 individual users were identified, and the criminal offenses for each user were mapped out. Some individuals had previously been convicted or were involved in ongoing investigations,” the Dutch police said in a press release.

Cybercriminals on the seized platform used to trade hacking tools, combo lists, and other stolen data, share fraud tutorials, and other illicit information. Some of the identified individuals were simply browsing the site or posting in the forum.

The average age of the users was just 20, and the youngest user was 11 years old. Former Cracked.io members are now receiving police letters or email messages. Additionally, police summoned 20 individuals, and eight are facing criminal charges. The final decision will be made by the Public Prosecution Service in the Netherlands.

During the interventions, the police focused on warning users of the impact of their actions and of the potential consequences. A criminal record makes it difficult to get a mortgage and pursue certain education and career opportunities.

“In addition, various Telegram and Discord accounts are also being deleted, because these accounts are probably used to trade in the data of possible victims,” the police said.

Cracked.io was hit during an international cyber law enforcement operation nicknamed Operation Talent.

Cybernews previously reported that after the takedown on January 25th, 2025, the Cracked respawned under a different top-level domain.

Authorities now warn that all similar platforms are “visible to the police.”

“These platforms may seem 'under the radar,' but make no mistake: many of these sites and groups are public,” the Dutch police warns.

“Participating in and visiting such platforms seems very easy and, above all, innocent, but there is a great risk that a line is crossed and a criminal offence is subsequently committed,” the police said.

“This could lead to actual crimes such as hacking, phishing, and bank helpdesk fraud.”

The Dutch police have gained recognition for having one of the most advanced cybercrime units and for their proactive approach to cybercrime. As the investigation continues, other countries may follow suit.

From Europol, several other countries have been involved in securing and disposing of the servers used by the Cracked forum over the past year.

While the site may have resurrected in April, BitDefender doubts whether it will regain user trust and evade further seizure attempts by the authorities. The predecessor already spilled critical information about cybercriminal identities.