Bellingcat unmasks LeakedBB forum admin
Investigation links NZ crypto entrepreneur Jitendra Maharaj to LeakedBB, a forum trading non-consensual intimate images and Snapchat hacking services.
Bellingcat and New Zealand outlet The Press investigated LeakedBB.com, a forum that grew to over 2.2 million registered users by monetizing non-consensual intimate imagery (NCII), including hacked OnlyFans/Fansly content, alleged 'revenge porn,' and Snapchat account compromises offered for hire. The site used a credit-based reward system and cryptocurrency payouts to incentivize members to post and 'unlock' leaked content, while obscuring transactions through a shell payment scheme involving a linked company, Logica Limited, and its 'digital avatar pack' storefront (logica.nz) to disguise membership payments from processors like NOWPayments.
Through DNS records, WHOIS history, forum administrator posts, GitHub repositories, and archived web content, the investigators traced multiple technical and corporate links — including domain registrations, an MX record chain, and a matching Fiji phone number — back to Jitendra Maharaj, a Christchurch-based former pilot and co-founder of crypto payments startup Pay It Now (PIN). Maharaj did not directly address the evidence when confronted, and LeakedBB went offline shortly after being contacted for comment. The case was previously referenced indirectly in the 2021 criminal prosecution of former track coach Steve Waithe, who used LeakedBB to extort student-athletes for intimate images and paid an associate to hack victims' Snapchat accounts.
While not a conventional malware or APT campaign, the article highlights a long-running platform enabling account compromise (Snapchat hacking-for-hire), non-consensual data exposure, and cryptocurrency-based monetization of stolen personal content, alongside weak DMCA/takedown processes designed to deter victim reporting.
Source reporting: https://www.bellingcat.com/news/2026/07/16/leakedbb-crypto-entrepreneur
This is the public brief
Subscribers see the full picture: extracted IOCs, ready-to-deploy detections (Sigma, Splunk, KQL, Elastic, YARA, Suricata), the entity graph, TAXII 2.1 feed and real-time alerts matched to your sectors.
Start free