FBI and French Authorities Shut Down NudeLeaksTeens, Arrest Suspected Operators
The FBI and French law enforcement have seized two websites NudeLeaksTeens (NLT) linked to the sale of hacked and stolen sexually explicit images and videos of young women and girls. The operation, announced by the U.S. Attorney’s Office for the Eastern District of Virginia, was conducted in collaboration with the FBI Washington Field Office and France’s cybercrime division of the Paris prosecutor’s office.
According to the seizure warrant, NLT sold content in "albums" and "collections" that often included victims’ personal identifying information, alongside explicit material. While the site claimed to prohibit child sexual abuse material (CSAM), investigators confirmed that it distributed such content, with some victims identified as minors at the time the images were created. One collection, advertised as containing 6,200 private nude files, was sourced from hacked Snapchat, Instagram, TikTok, and Facebook accounts and included CSAM.
The operation led to the arrest of a 25-year-old man in northern France, suspected of administering the site, along with his 21-year-old brother. French authorities estimate the platform victimized over 17,000 women worldwide. Victims were indexed by age, location, profession, and physical appearance, with a "beauty rating" system, and users were rewarded with cryptocurrency for submitting information.
During the arrests, authorities seized approximately €700,000 in Bitcoin, Litecoin, USDT, and Ethereum. Both the FBI and French officials have urged victims to come forward.
The takedown was described by FBI Assistant Director Darren B. Cox as a critical step in dismantling criminal networks exploiting anonymous platforms to distribute hacked material. The joint effort targeted the infrastructure enabling the illegal marketplace, disrupting its operations.
Source: https://www.helpnetsecurity.com/2026/10/08/nudeleaksteens-seized-fbi-france/
Meta cybersecurity rating report: https://www.rankiteo.com/company/meta
"id": "MET1791469897",
"linkid": "meta",
"type": "Breach",
"date": "10/2026",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Over 17,000 women worldwide',
'industry': 'Cybercrime, Dark Web Marketplace',
'location': 'France (suspected operators), Global '
'(victims)',
'name': 'NudeLeaksTeens (NLT)',
'type': 'Illegal content marketplace'}],
'attack_vector': 'Hacked social media accounts (Snapchat, Instagram, TikTok, '
'Facebook)',
'data_breach': {'data_exfiltration': 'Yes (content sold on dark web '
'marketplace)',
'file_types_exposed': 'Images, videos',
'number_of_records_exposed': '6,200+ private nude files in '
'one collection, over 17,000 '
'victims total',
'personally_identifiable_information': 'Yes (names, '
'locations, '
'professions, ages, '
'physical appearance '
'details)',
'sensitivity_of_data': 'High (explicit content, CSAM, PII)',
'type_of_data_compromised': 'Sexually explicit images, '
'videos, personal identifying '
'information, child sexual abuse '
'material (CSAM)'},
'description': 'The FBI and French law enforcement have seized two websites '
'NudeLeaksTeens (NLT) linked to the sale of hacked and stolen '
'sexually explicit images and videos of young women and girls. '
'The operation targeted the distribution of non-consensual '
'explicit material, including child sexual abuse material '
'(CSAM), and led to the arrest of two suspects in France.',
'impact': {'data_compromised': 'Sexually explicit images and videos, personal '
'identifying information',
'financial_loss': '€700,000 in cryptocurrency seized',
'identity_theft_risk': 'High (personal identifying information '
'exposed)',
'legal_liabilities': 'Potential criminal charges for distribution '
'of CSAM and non-consensual explicit material',
'operational_impact': 'Website seized and shut down',
'systems_affected': 'NudeLeaksTeens website infrastructure'},
'initial_access_broker': {'data_sold_on_dark_web': 'Yes (content sold in '
'albums/collections)',
'entry_point': 'Hacked Snapchat, Instagram, TikTok, '
'and Facebook accounts',
'high_value_targets': 'Young women and girls, '
'indexed by age, location, '
'profession, and physical '
'appearance'},
'investigation_status': 'Ongoing (victims urged to come forward)',
'lessons_learned': 'Need for stronger law enforcement collaboration to '
'dismantle illegal dark web marketplaces, importance of '
'victim reporting and support, risks of weak '
'authentication on social media platforms',
'motivation': 'Financial gain, exploitation of victims for cryptocurrency '
'rewards',
'post_incident_analysis': {'corrective_actions': 'Website seizure, arrests, '
'disruption of marketplace '
'operations, victim outreach',
'root_causes': 'Weak authentication on social '
'media platforms, lack of victim '
'awareness, exploitation of '
'anonymous platforms for illegal '
'content distribution'},
'recommendations': 'Enhance social media platform security, improve victim '
'reporting mechanisms, increase public awareness of '
'non-consensual content distribution risks, strengthen '
'international cybercrime cooperation',
'references': [{'source': 'U.S. Attorney’s Office for the Eastern District of '
'Virginia'},
{'source': 'FBI Washington Field Office'},
{'source': 'France’s cybercrime division of the Paris '
'prosecutor’s office'}],
'regulatory_compliance': {'legal_actions': 'Arrests of suspected operators, '
'potential criminal charges',
'regulations_violated': 'Distribution of CSAM, '
'non-consensual explicit '
'material, data privacy '
'laws (GDPR, U.S. '
'federal/state laws)'},
'response': {'communication_strategy': 'Public announcement by U.S. '
'Attorney’s Office for the Eastern '
'District of Virginia, victim outreach',
'containment_measures': 'Website seizure, arrests of suspected '
'operators',
'law_enforcement_notified': 'Yes (FBI and French authorities)',
'remediation_measures': 'Disruption of illegal marketplace '
'operations',
'third_party_assistance': 'FBI Washington Field Office, France’s '
'cybercrime division of the Paris '
'prosecutor’s office'},
'stakeholder_advisories': 'Law enforcement agencies advising victims to '
'report incidents, social media platforms urged to '
'enhance security measures',
'threat_actor': 'Suspected administrators of NudeLeaksTeens (25-year-old and '
'21-year-old brothers in France)',
'title': 'FBI and French Authorities Shut Down NudeLeaksTeens, Arrest '
'Suspected Operators',
'type': 'Data Breach, Extortion, Illegal Content Distribution',
'vulnerability_exploited': 'Compromised social media accounts, weak '
'authentication mechanisms'}