Bellingcat unmasks LeakedBB forum admin
Investigation links NZ crypto entrepreneur Jitendra Maharaj to LeakedBB, a forum trading non-consensual intimate images and Snapchat hacking services.
Sourcebellingcat.com — open the original
What to check
- Applies to
- Whether this concerns you is not assessed; the names the report mentions are listed below.
Bellingcat and New Zealand outlet The Press investigated LeakedBB.com, a forum that grew to over 2.2 million registered users by monetizing non-consensual intimate imagery (NCII), including hacked OnlyFans/Fansly content, alleged 'revenge porn,' and Snapchat account compromises offered for hire. The site used a credit-based reward system and cryptocurrency payouts to incentivize members to post and 'unlock' leaked content, while obscuring transactions through a shell payment scheme involving a linked company, Logica Limited, and its 'digital avatar pack' storefront (logica.nz) to disguise membership payments from processors like NOWPayments.
Through DNS records, WHOIS history, forum administrator posts, GitHub repositories, and archived web content, the investigators traced multiple technical and corporate links — including domain registrations, an MX record chain, and a matching Fiji phone number — back to Jitendra Maharaj, a Christchurch-based former pilot and co-founder of crypto payments startup Pay It Now (PIN). Maharaj did not directly address the evidence when confronted, and LeakedBB went offline shortly after being contacted for comment. The case was previously referenced indirectly in the 2021 criminal prosecution of former track coach Steve Waithe, who used LeakedBB to extort student-athletes for intimate images and paid an associate to hack victims' Snapchat accounts.
While not a conventional malware or APT campaign, the article highlights a long-running platform enabling account compromise (Snapchat hacking-for-hire), non-consensual data exposure, and cryptocurrency-based monetization of stolen personal content, alongside weak DMCA/takedown processes designed to deter victim reporting.
Source reporting: https://www.bellingcat.com/news/2026/07/16/leakedbb-crypto-entrepreneur
Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 16,433 reports from 149 sources, 661 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them, not the rest of the week's. Nothing is charged unless you subscribe.
Create a free account What it costs