Cyprus police have seized servers that were used to sell social security numbers and other personal information stolen from 24 million US citizens, a law enforcement official said Thursday.
Police Cybercrime Department Chief Andreas Anastasiades told the state-run Cyprus News Agency that four websites were taken down in a joint operation with the US Federal Bureau of Investigation and the Internal Revenue Service.
Anastasiades said the servers’ manager, who is a resident of Cyprus, cooperated with authorities following a six month-long investigation.
A US Department of Justice statement said the SSNDOB Marketplace websites operated for years and generated more than $19 million in sales revenue.
The personal information that was hacked included the names, dates of birth and social security numbers of US citizens.
According to the statement, SSNDOB administrators advertised on darkweb criminal forums. To avoid detection, administrators used online monikers to conceal their true identities, maintained servers in various countries and required buyers to use digital payment methods like bitcoin.
It said that the international operation “to dismantle and seize this infrastructure” resulted from cooperation with law enforcement authorities in both Cyprus and Latvia.