In the dark corners of the internet, where privacy is treated as a commodity and consent is an afterthought, the forum "LeakedBB" stood as a titan of exploitation. For seven years, the site operated as a digital bazaar for non-consensual intimate imagery (NCII), hosting millions of stolen photos and videos while rewarding its users for the systematic violation of women’s privacy. Now, a joint investigation by Bellingcat and New Zealand news outlet The Press has pierced the veil of anonymity surrounding the platform, uncovering evidence that links the site to a Christchurch-based cryptocurrency entrepreneur: Jitendra Maharaj. The Anatomy of an Online Predator The story of LeakedBB is inseparable from the broader, disturbing trend of digital extortion. In 2024, the sentencing of Steve Waithe, a former track and field coach in Boston, brought national attention to the predatory mechanics of such forums. Waithe had been sentenced to five years in federal prison for orchestrating a campaign of "sextortion" against over 100 women, including student-athletes under his care. Court documents from the 2021 criminal complaint reveal that Waithe did not merely distribute images; he weaponized them. He gained access to victims’ private files by filming their "form" during practice or by hacking into their Snapchat accounts. When cornered, victims were often directed to LeakedBB—the site where their images were being traded—as a pressure tactic to force them into providing further explicit content under the guise of having their photos "removed." While legal documents omitted the name of the forum Waithe used, digital forensics conducted by Bellingcat matched a cached post from November 2020 on LeakedBB to the exact language used by Waithe. The site was not merely a passive host; it was a community that actively encouraged the hacking of private accounts and the distribution of intimate media, creating a pipeline of trauma for victims worldwide. A Chronology of Exploitation LeakedBB was established in 2019 and, by the time of its closure in June 2026, it had amassed a staggering 2.2 million registered users. With monthly traffic peaking at two million visits, the forum became a primary destination for the trade of stolen iCloud content, leaked OnlyFans material, and intimate images of private individuals who had no connection to the adult entertainment industry. The platform was built on a perverse economic model. It did not merely host content; it incentivized its creation. Users were rewarded with credits for uploading "leaks," which could then be redeemed for cryptocurrency. The forum even held annual Christmas contests, awarding thousands of dollars in crypto to the most prolific "leakers." This gamification of abuse ensured a steady supply of content, as users vied for status and financial gain by invading the lives of others. The site’s administrative oversight was managed by a user known as "Lucifer NightStar." According to MyBB documentation, this account—assigned the user ID "1"—held super-administrator privileges, rendering it immune to removal or moderation. The account remained active for years, providing technical guidance, managing payment disputes, and presiding over the marketplace where users sold illicit content to one another. Connecting the Dots: From Pilots to Plugins The investigation into the ownership of LeakedBB began with a single, inadvertent clue left by Lucifer NightStar in a May 2021 forum post. While explaining how to navigate a payment issue, the administrator shared a screenshot displaying the name of a company: "Logica LTD." Company records from New Zealand identify Logica Limited as a firm registered in February 2021 by Jitendra Maharaj, a Christchurch-based former pilot and co-founder of the cryptocurrency startup "Pay It Now" (PIN). Maharaj has served as the sole director of Logica Limited since its inception. The connections extend far beyond a shared company name. Digital forensics revealed that a YouTube video uploaded by the "LeakedBB" account—which provided tutorials on how to purchase site memberships—redirected users to a website, logica.nz, to purchase "digital avatar packs." These packs were the mechanism through which the forum processed payments, a common tactic used by illicit sites to bypass the strict terms of service of mainstream payment processors. The thumbnails, pricing, and product descriptions on the Logica website were identical to those used on LeakedBB. Furthermore, DNS records link the forum to a domain registry, mybbplugins.com, which was publicly registered to Maharaj from 2011 to 2019. This registry also issued DNS certificates for domains bearing Maharaj’s own name, as well as subdomains used for his other projects. The digital fingerprint is consistent: the same technical infrastructure used to build the foundation of LeakedBB mirrors the professional trajectory of Maharaj. Official Responses and the "Targeted Attack" Defense When approached by The Press and Bellingcat in June 2026, the reaction from Maharaj was defensive and inconsistent. After an initial period of silence—during which he reportedly traveled to Fiji for a family funeral—Maharaj eventually spoke to reporters outside his home in the affluent Christchurch suburb of Aidanfield. Maharaj denied knowing who operated LeakedBB and characterized the investigation as a "targeted attack" based on "manufactured evidence." When confronted with the specific links between his company, Logica Limited, and the forum’s payment portal, he stated, "Logica was my company. I cannot say what happened there right now." He refused to comment on the record about the technical links to his past domains or the GitHub repositories that contained code for scraping content from LeakedBB, consistently referring all inquiries to his legal counsel. Notably, in the days following initial inquiries, several digital footprints were erased: Maharaj’s LinkedIn profile was deleted, his GitHub repositories were scrubbed of incriminating content, and LeakedBB itself was taken offline. The Wider Implications of Digital Abuse The existence of LeakedBB highlights a critical failure in current legal frameworks regarding online abuse. While the United States has introduced the "Take It Down Act" to mandate the removal of non-consensual imagery, enforcement remains a nightmare when the platforms operate across international borders. Reba Rocket, COO of Takedown Piracy, notes that sites like LeakedBB rely on the fact that many users do not view online theft with the same moral gravity as physical theft. "People would not shove a DVD into their coat pocket and walk out of the store," Rocket explained. "Whereas watching something on the internet for free doesn’t have that same connected moral." The consequences for victims are severe. Allison Mahoney, a managing attorney specializing in abuse survivor services, described cases where victims lost their jobs, were ostracized by their communities, or faced physical threats after their personal information—including names, workplaces, and social media handles—was posted alongside their images. The "doxing" of victims, intended to maximize the humiliation of the leak, frequently turned online abuse into real-world danger. Conclusion: A Deterrent or a Symptom? The shuttering of LeakedBB, while a victory for the victims who were relentlessly harassed on its pages, does not end the phenomenon of NCII. As long as platforms can be monetized through cryptocurrency gateways and hosted in jurisdictions that ignore international takedown requests, the risk remains. However, the exposure of individuals like Jitendra Maharaj serves a vital purpose. The anonymity of the internet has long served as a shield for those who profit from the degradation of others. By stripping away that shield and revealing the real-world identities of those behind the screens, investigators hope to impose a social and legal cost on behavior that has, for too long, gone unchecked. As the legal landscape continues to struggle to keep pace with technological advancement, the case of LeakedBB remains a sobering reminder of the intersection between digital innovation and human cruelty. The message to those who build these platforms is increasingly clear: the digital realm is not a vacuum, and the identities of those who profit from the destruction of others are no longer beyond reach. If you are a victim of image-based abuse or know someone who is, resources and support are available through StopNCII.org. Post navigation The Shadow of the Shahed: Russian Kamikaze Drones Emerge in Mali’s Sahel Conflict
