First VPN takedown by Europol and French-Dutch authorities
Law Enforcement
Summary
Hide ▲
Show ▼
Europol and French and Dutch authorities took First VPN offline in a cross-border operation that also seized servers and arrested the administrator. The case matters because the service was used in ransomware and data theft attacks and was part of cybercrime infrastructure. The action also enabled investigators to collect traffic data and identify users tied to broader cybercrime probes.
Related Happenings
Joint operation dismantles First VPN Service (1VPNS)
Law Enforcement
H score33
First: 14.07.2026 11:02
Last: 14.07.2026 11:02
Sources 1
About this happening:
European and North American authorities dismantled First VPN Service (1VPNS) in a ransomware-linked takedown, removing infrastructure used to hide attack origins and o...
Joint operation dismantles First VPN Service (1VPNS)
Law EnforcementAbout this happening: European and North American authorities dismantled First VPN Service (1VPNS) in a ransomware-linked takedown, removing infrastructure used to hide attack origins and o...
Operation Endgame takedown of SocGholish and Evil Corp infrastructure
Law Enforcement
H score58
First: 18.06.2026 16:25
Last: 18.06.2026 16:25
Sources 1
About this happening:
International law enforcement disrupted SocGholish/FakeUpdates infrastructure in Operation Endgame on June 18, cleaning 14,971 compromised WordPress websites a...
Operation Endgame takedown of SocGholish and Evil Corp infrastructure
Law EnforcementAbout this happening: International law enforcement disrupted SocGholish/FakeUpdates infrastructure in Operation Endgame on June 18, cleaning 14,971 compromised WordPress websites a...
Europol-led AudiA6 crypto-laundering takedown
Law Enforcement
H score29
First: 11.06.2026 18:55
Last: 11.06.2026 18:55
Sources 1
About this happening:
Law enforcement dismantled AudiA6, a cryptocurrency laundering service used by ransomware gangs and other cybercriminal networks, in a June 10, 2026 multinatio...
Europol-led AudiA6 crypto-laundering takedown
Law EnforcementAbout this happening: Law enforcement dismantled AudiA6, a cryptocurrency laundering service used by ransomware gangs and other cybercriminal networks, in a June 10, 2026 multinatio...
Dutch police and NCSC seize botnet infrastructure
Law Enforcement
H score40
First: 29.05.2026 17:26
Last: 29.05.2026 17:26
Sources 1
About this happening:
Dutch police and the NCSC seized more than 200 servers and took offline a 17 million-device botnet, disrupting infrastructure used for cyberattacks. The action fol...
Dutch police and NCSC seize botnet infrastructure
Law EnforcementAbout this happening: Dutch police and the NCSC seized more than 200 servers and took offline a 17 million-device botnet, disrupting infrastructure used for cyberattacks. The action fol...
Dutch National Police arrest Ajax hack suspect
Law Enforcement
H score35
First: 27.05.2026 12:09
Last: 27.05.2026 12:09
Sources 1
About this happening:
The Dutch National Police arrested a 35-year-old man from Buren in a computer trespassing case tied to Ajax Amsterdam (AFC Ajax), escalating a criminal probe into...
Dutch National Police arrest Ajax hack suspect
Law EnforcementAbout this happening: The Dutch National Police arrested a 35-year-old man from Buren in a computer trespassing case tied to Ajax Amsterdam (AFC Ajax), escalating a criminal probe into...
Timeline
-
21.05.2026 16:09 2 articles · 1mo ago
Europol and French-Dutch authorities dismantle First VPN
Initial DisclosureEuropol and French and Dutch authorities took First VPN offline in a joint international law enforcement operation, seizing 33 servers, taking down 1vpns.com, 1vpns.net, 1vpns.org and related onion domains, arresting the administrator, searching a house in Ukraine, and sharing intelligence about 506 users linked to ransomware and data theft activity.
Show sources
- Police seize “First VPN” service used in ransomware, data theft attacks — www.bleepingcomputer.com — 21.05.2026 16:09
- First VPN Dismantled in Global Takedown Over Use by 25 Ransomware Groups — thehackernews.com — 22.05.2026 20:35