An online marketplace can disappear before the investigation into its customers has really begun. On November 12, the U.S. Justice Department reported 354 arrests in Operation TorNado, a set of national investigations that drew on information recovered in earlier seizures of dark web markets. Authorities counted 132 arrests in the United States.
The total covers work from May 2025 through October 2026. It includes investigations of people suspected of buying or selling through several markets, among them Archetyp and Bohemia. BleepingComputer reported that national investigators also pursued activity outside the markets themselves, including on messaging services. The numbers announced together do not describe a single raid or a single prosecution.
From an account to a court case
In one federal case in Virginia, prosecutors charged two brothers arrested in Florida with conspiring to distribute synthetic opioids. The department said laboratory work, surveillance and purchases by investigators linked the men to a vendor account and a nationwide mailing operation. Those are allegations; an arrest does not establish who operated the account or what a court will ultimately find.
NAOAT analysis: What an arrest total can measure
The most revealing detail for investigators working with digital records is the range of evidence in that Virginia case. A marketplace record may suggest that two transactions belong to one seller. A laboratory can establish what was in a parcel. Neither finding, by itself, identifies the person who put it in the mail. The operation’s arrest count captures one stage of that work; it cannot tell readers how many identifications will hold up in court or whether trade has shifted elsewhere.