U.S. seeks extradition of notorious hacker “Intelbroker” from France

In Data Breach News, News
June 26, 2025
U.S. seeks extradition of notorious hacker “Intelbroker” from France
Stock image: Freepik

When French law enforcement announced the arrest of four individuals alleged to be part of ShinyHunters, they also noted that a fifth individual, a British national known as “IntelBroker,” was arrested in France in February and detained.

Hours later, the U.S. Attorney’s Office for the Southern District of New York announced that Intelbroker, whose real name is Kai Logan West, had been indicted by a grand jury on a four-count indictment and they were seeking his extradition from France.

According to the complaint, West is not charged for any role in ShinyHunters, even though he was listed as the “owner” of BreachForums beginning in August 2024 until he resigned in January. He has been charged for the hacks he did as an individual and with a group called “CyberN—–” (racist slur removed). West and at least one other member of that group used the forum to sell data they had hacked and to make deals.

Unbeknownst to West, a few of those deals involved him selling stolen data to undercover agents. West also made other errors that enabled law enforcement to track his activities and identify him.

IntelBroker is known for some big cyberattacks over the past few years. Between approximately 2023 to 2025, West offered hacked data for sale approximately 41 times; and offered to distribute hacked data for free (or for forum credits) approximately 117 times. West and his co-conspirators sought to collect at least approximately $2,000,000 by selling the stolen data. 

Based on information received from the victims of these breaches, the government alleges that West and his co-conspirators cumulatively caused victim losses of at least $25,000,000.

Although the complaint and indictment do not name specific victims, based on the dates and description, Victim-1 would be AT&T, while Victim-3 would be the DC Health Benefit Exchange (“DC Health Links”).

Other targets of IntelBroker included Hewlett Packard Enterprise, T-Mobile, Verizon,  Europol, Home Depot, General Electric, and various U.S. government agencies, including the Pentagon.

Although IntelBroker enjoyed a somewhat scary image as a hacker, pictures of West included in a court filing and posted on social media reveal a pale, somewhat frail-looking young man.