Law enforcement agencies began collecting data from Encrochat on April 1st. According to the BBC, the encryption code was likely cracked in early March. It’s not clear exactly how officials hacked the platform, which is now shut down.

It’s not unusual for criminals to communicate via encrypted apps and devices. In 2018, the FBI arrested Vincent Ramos, the CEO of Phantom Secure, a company that was selling custom BlackBerrys to drug cartels. When Ramos pleaded guilty, he admitted that the encrypted handsets were used to facilitate sales of cocaine, heroin and methamphetamines and that Phantom Secure remotely wiped the devices if they were obtained by law enforcement.

In the US, politicians promoting the EARN IT Act want to penalize companies for using end-to-end encryption. In theory, that may prevent platforms like Encrochat and Phantom Secure, but the bill would make changes to Section 230 of the Communications Decency Act, and doing that could have far-reaching consequences. For starters, it might lead to social media platforms censoring anything that might prompt a legal challenge — or shutting down altogether.

For now at least, we can be happy that officials busted Encrochat users. In addition to the arrests, police in the UK say they prevented kidnappings and executions, “mitigating over 200 threats to life.”

“Together we’ve protected the public by arresting middle-tier criminals and the kingpins, the so-called iconic untouchables who have evaded law enforcement for years, and now we have the evidence to prosecute them,” NCA Director of Investigations Nikki Holland said in a statement.

Today, the Security Service of Ukraine (SSU) announced that it has detained the hacker, known as Sanix, who caused a stir last year for trying to sell a database with 773 million email addresses and 21 million unique passwords. Officials say that 87-gigabyte database was only a fraction of the stolen data Sanix collected. He allegedly had seven similar databases, which held personal and financial data from residents in the European Union and North America.

The stolen data included email passwords, bank card PIN codes, e-wallets of cryptocurrencies, PayPal accounts and info about computers hacked for botnets and DDoS attacks. In a raid of Sanix’s residence, law enforcement confiscated equipment with two terabytes of stolen information.