Skip to content

Pompompurin's Legal Woes Deepen as Resentencing Looms

From civil lawsuits to resentencing, Pompompurin's legal troubles are far from over. The fate of the notorious data breach forum operator hangs in the balance.

In this picture we can see a blog with an image, words and numbers.
In this picture we can see a blog with an image, words and numbers.

Conor Brian Fitzpatrick, known online as 'Pompompurin', has faced a series of legal setbacks. In a first for cybercrime cases, he was named in a civil lawsuit. Now, he awaits resentencing after his initial sentence was vacated.

Fitzpatrick's troubles began in March 2022 when he launched BreachForums, a platform for trading stolen data. This followed the FBI's shutdown of RaidForums, its predecessor. BreachForums facilitated the sale of databases from hundreds of hacking victims, including major consumer data breaches.

In 2023, tens of thousands of records stolen from Nonstop Health, a California-based health insurance provider, were posted for sale on BreachForums. Nonstop Health sued and added Fitzpatrick as a defendant in November 2023. The company agreed to pay $1.5 million to settle the class action in January 2025.

Fitzpatrick was initially sentenced to time served and 20 years of supervised release in January 2024. However, he was rearrested the same month for violating his release terms. He pleaded guilty to access device fraud and possession of child sexual abuse material. A federal appeals court vacated his sentence in January 2025, ordering a resentencing on June 3, 2025. As part of the civil settlement, Fitzpatrick will forfeit nearly $700,000.

Fitzpatrick's case marks a significant development in cybercrime litigation. His resentencing, scheduled for next month, will determine the next steps in his legal journey. Despite his crimes, no other responsible parties have been investigated or arrested as of now.

Read also:

Latest