BreachForums Admin to Be Resentenced After Appeals Court Criticises Lenient Sentence

Conor Fitzpatrick, the founder of the notorious cybercrime platform BreachForums, is set to be resentenced after a U.S. appeals court vacated a controversial district court ruling that allowed him to serve just 17 days in prison.

Fitzpatrick, 21 at the time of sentencing, pleaded guilty to multiple charges including possession of child pornography and conspiracy to traffic stolen personal data. The District Court for the Eastern District of Virginia had originally sentenced Fitzpatrick to 20 years of supervised release, citing his autism spectrum disorder and age as factors that justified a lenient sentence. The court claimed that prison would not provide adequate treatment for him and that he would be “ravaged” by incarceration.

However, the three-judge panel, led by Appellate Court Judge Paul Niemeyer, found the sentence to be “substantively unreasonable” and criticized the court for underestimating the severity of Fitzpatrick’s crimes. The court also noted Fitzpatrick’s ongoing violations of his release conditions, including his participation in online chatrooms and his attempts to circumvent restrictions by accessing the internet using a new iPhone and VPN.

Fitzpatrick, who was arrested in 2023 and admitted to being the leading administrator of BreachForums under the alias "pompompurin," facilitated the trade of personal data from millions of individuals, including information stolen from the FBI and Washington, D.C.’s healthcare marketplace. Despite his guilty plea, he continued to boast about his criminal activities in online discussions, even joking about selling stolen government secrets.

The appellate court’s decision has sent the case back to the district court for resentencing, highlighting the need for a sentence that properly reflects the seriousness of Fitzpatrick’s offences.