The facts
Dutch investigators said they recovered data concerning more than 3,000 customers and were pursuing follow-up inquiries. The physical servers were in a Limburg data center. [2]
Authorities allege that the hosting service facilitated cybercrime, including ransomware and phishing, and laundered payments. US, Dutch, German and British agencies participated in the investigation. [1][2]
BleepingComputer reported that parts of the provider remained online. It also reported that the operator rejected allegations of knowingly hosting child-abuse material; the allegations are not reported here as criminal convictions. [3]
Still unconfirmed
- The final scope of the infrastructure disruption and the outcomes of customer investigations remain unresolved.
Sources
References support the numbered facts above. Source checks: 29 Oct 2026, 08:23 UTC.
The two police statements concern the same coordinated operation. BleepingComputer is independently owned reporting, but the alleged crimes remain attributed to authorities. No customer identities, victim details or live criminal-service links are reproduced.
- “Bulletproof” website domain seized in international law enforcement operation
US Department of Justice, Eastern District of Virginia · Primary source · 27 Oct 2026
Prosecutors’ seizure announcement and attributed allegations; not a finding of guilt.
- Internationale politieactie tegen bulletproof hoster
Netherlands Police · Primary source · 28 Oct 2026
Dutch-language operational statement; customer counts and server seizures are attributed to police.
- Police seize Virtualine bulletproof service tied to ransomware, cybercrime
BleepingComputer · Reporting · 28 Oct 2026
Independent reporting by Bill Toulas, including the operator’s denial and continuing partial availability.