Europol announces 29 arrests in an operation against illegal streaming networks

An international operation against illegal streaming networks has led to 29 arrests, the dismantling of nine organized crime groups, and the removal of over 27,000 URLs used for unauthorized access to sports broadcasts, movies, and premium TV channels.

In brief

The KRATOS 2 operation targeted networks that illegally distributed protected content through online platforms and IPTV services.

Authorities made 29 arrests and identified 86 suspects.

New organized crime groups were dismantled.

Over 27,000 illegal streaming URLs were removed.

Europol warns that these services can expose users to malware, spyware, data theft, and other online risks.

The KRATOS 2 operation took place between September 2025 and April 2026 and targeted the criminal infrastructure that enabled the operation of illegal IPTV services and unauthorized streaming platforms in multiple jurisdictions.

For users, illegal streaming services may seem like a cheap way to access premium content. However, Europol indicates that behind these platforms are complex criminal networks that separate the visible sites for customers from the servers where illegal content is hosted and distribute the infrastructure across multiple countries to avoid detection.

These services not only cause losses for rights holders. Europol warns that users may be exposed to cybersecurity risks, including malware infections, spyware, data theft, and other forms of online exploitation.

Investigators did not limit themselves to shutting down websites. The operation's strategy was to identify the criminal ecosystem that supported illegal streaming services, including individuals involved in the management and technical operation of the platforms.

The results of the operation include 148 searches, 59 cases referred to judicial authorities, and 72 ongoing criminal investigations. Authorities reported 169 domains, removed 27,332 URLs, and identified 722,961 items that violated copyright.

Cooperation with the private sector contributed to identifying and disrupting criminal infrastructures. Through this collaboration, authorities identified 4,370 new domains related to piracy activities, 18,331 IP addresses associated with illegal services, 397,384 URLs reported for suspension or removal, and 126,979 additional items that violated copyright.

Europol coordinated the operation together with the General Directorate for Combating Organized Crime in Bulgaria. The European agency facilitated the exchange of information between participating countries, cross-border cooperation, and operational and technical support provided to national authorities.

Information received from private partners was shared through the secure SIENA application, Europol's system for information exchange between authorities. This allowed investigators to build a clearer picture of the criminal ecosystem and coordinate actions across multiple jurisdictions.

The operation involved authorities from Belgium, Bulgaria, Croatia, France, Greece, Ireland, Italy, the Netherlands, Poland, Romania, Spain, the United Kingdom, and the United States. Europol also cooperated with partners from the audiovisual and anti-piracy sectors, including AAPA, ACE/MPA, LALIGA, UEFA, Friend MTS, beIN Media Group, and Irdeto.

Illegal streaming has become an area where digital piracy, organized crime, and cybersecurity risks overlap. For consumers, the low price may hide exposure to data theft and malicious software. For authorities, the case shows that shutting down websites is not enough when the infrastructure, servers, domains, and administrators are distributed across multiple countries.

https://2eu.brussels/ro/stiri/europol-anunta-29-de-arestari-intr-o-operatiune-impotriva-retelelor-de-streaming-ilegal