In November 2019, DDoSecrets published more than two terabytes of data from Cayman National Bank and Trust, supplied by the hacktivist Phineas Fisher. The files included information on politically exposed clients and were examined by the Organized Crime and Corruption Reporting Project and other researchers. Reporting connected the bank to offshore dealings involving elites and officials, and identified its role in the Wirecard scandal. Belgian tax authorities opened an investigation based on the leak and related material.
The following month, DDoSecrets and the OCCRP released 450 gigabytes from Formations House, a British company-formation firm known as a company mill. The data showed networks of entities across Hong Kong, Cyprus, the British Virgin Islands and Pakistan, and described services that could help clients evade anti-money-laundering safeguards, including off-the-shelf companies with nominee directors, trading histories and bank accounts. The Times reported no proof that Formations House itself had acted illegally, but the disclosures highlighted how inexpensive British incorporation services could be exploited by organized crime, fraudulent banks and opaque state-linked businesses. The leaks prompted calls in Britain and Sweden for reforms to company registration and stronger audits of wealthy clients.
