- French police arrested three 17-year-olds for allegedly operating the Reacher and Stryx stolen data lookup platforms.
- The platforms claimed to index 730 million lines of stolen data and processed about 3.1 million searches.
- The suspects will face a Paris juvenile court on January 14, 2027, and could receive up to 10 years in prison if convicted.
French authorities have arrested three 17-year-olds for allegedly running two stolen data lookup platforms. The sites, Reacher and Stryx, let users search leaked personal information.
The Office for Combating Cybercrime of France, known as OFAC, arrested the suspects on October 6. Officers shut down the platforms the next day.
What Reacher and Stryx Did
Reacher launched in March this year as a data lookup service. It changed its name to Stryx in June. The platform collected stolen personal data from different sources. One could look for the information by searching with the help of data, such as names, numbers, home addresses, account information, IBANs, plus registration numbers.
Reacher and Stryx offered free searches. They also sold paid subscriptions and search credits. This setup helped the service attract both casual users and people who needed repeated searches.
The service claimed to index 730 million lines of data. It also said it had processed about 3.1 million searches. These figures show the scale of the platform.
The sites functioned like the online search engines used by general users to find information about stolen records. A person searching for the required information had to input some details, such as a vehicle registration number. The platform then returned matching personal information.
How the Investigation Started
The cybercrime section of the Paris prosecutor’s office and OFAC led the operation. They identified the three teenagers as suspected administrators of the platforms.
The suspects had no previous criminal record, according to the office of the Paris prosecutor. Officers arrested them during an operation on October 6. Authorities closed Reacher and Stryx on October 7. They also took the platforms offline during the same operation.
The case marks the first time French police have dismantled a lookup platform of this kind. Officials say these sites make stolen data easier to find and misuse. The investigation focused on the people who ran the service. Police did not say whether they had identified people who bought searches or used the data.
European authorities have also pursued suspects in other cybercrime investigations, including a case in which Spain arrested a suspected pro-Russia hacker in an FBI-assisted operation.
Charges Against the Teenagers
Prosecutors accuse the three teenagers of receiving fraudulently extracted data. They also face accusations of possessing and transmitting stolen data as part of an organized group. The charges relate to data taken from automated data processing systems. This term covers computer systems that store and process information.
On January 14, 2027, juvenile court hearings will take place in Paris concerning this group of teenagers. If the court convicts them, these teenagers may serve a sentence of up to a decade behind bars.
At this point, the teenagers have yet to be convicted. The ultimate decision regarding the case will take place in court after the presentation of evidence during the trial. The case may also affect other people who run similar platforms. French authorities have made it clear that operating a stolen data search service can lead to criminal charges.
Why Lookup Sites Matter
Services that protect individuals collect information from data breaches and leaks. They provide this information for individuals to search for them to see quickly.
As a result, the individual can access information about the name, contact information, address, and financial data of someone else. Also, criminals may misuse this information in negative acts, such as committing fraud, identity theft, and harassment.
Moreover, a phone number or IBAN can help someone find more details about a person. This makes lookup platforms dangerous even when users only search for basic information.
French officials warn that these platforms are spreading. They say police will continue targeting services that trade in stolen personal data. Though the shutdown may hinder access to the aforementioned platforms, stolen data can still be circulating on various other websites, encrypted messaging channels, & private networks.
What People Can Do
People must find out if their emails or phone numbers are available in publicly known data breaches. It is advisable to update the respective passwords after a data breach incident and not reuse the passwords in the future.
Users should turn on two-factor authentication where possible; this move provides another layer of security to accounts. Also, they should watch for phishing messages that reference personal details.
Every bank or web service can also cut down risks. They can detect and stop fraud attempts by monitoring the login procedures and blocking suspicious transactions. Also, they can alert their customers of such activities on their accounts.
The Reacher and Stryx case shows that authorities now treat stolen data platforms as serious cybercrime operations. It also shows that even young operators can face major criminal charges.
Share this article
About the Author
Farwa is an experienced InfoSec writer and cybersecurity journalist skilled in writing articles related to cybersecurity, AI, DevOps, Big Data, Cloud security, VPNs, IAM, and Cloud Computing. Also a contributor on Tripwire.com, Infosecurity Magazine, Security Boulevard, DevOps.com, and CPO Magazine.
More from Farwa SajjadRelated Posts
Privacy Concerns Grow Over Meta Muse Profiles of People Who Never Use the App
WIRED and independent researcher Karan Joshi report that Muse’s instructions tell it to build a page...
ICANN Switches DNS Root to KSK-2024 in Major Internet Security Update
The root zone KSK rollover took place on October 11, the second time since the first one nearly a de...
Florida Sues TP-Link Over Router Security Risks and Alleged China Links
Florida’s Attorney General James Uthmeier sued TP-Link, saying the company hid risks tied to i...
Microsoft Warns Hackers are Using AI to Speed Up Cyberattacks
Microsoft declared that threat actors are presently reaping AI advantages at a faster pace with rega...
Signal Expands Encrypted Backups and Private iPhone Transfers in Version 8.30
Signal version 8.30 adds on-device backups to iOS and Signal Desktop. The update separates media fil...
Hacker Claims 4.5 Million Records Linked to Italian Hotel Software Firm WuBook Leaked
An underground forum user says they leaked 4.5 million names and IDs tied to WuBook, an Italian hote...
