Skip to content
Daniel Greaves: 110,000+ Dark Web CSAM Files Found on 76 Devices

Daniel Greaves: 110,000+ Dark Web CSAM Files Found on 76 Devices

Darkwebdecoded • September 30, 2026

Daniel Greaves, 35, of Patrington, East Yorkshire, received a two-year suspended sentence at Hull Crown Court on September 28, 2026, after pleading guilty to three counts of making indecent images of children. Police found more than 110,000 images and videos on 76 seized devices. He had used the dark web to collect the material over nine and a half years. He is now on the Sex Offenders Register for ten years.

He pleaded guilty to three counts of making indecent images of children and was given a two-year suspended sentence. He was also ordered to complete 200 hours of unpaid work and 20 rehabilitation days. Greaves has been placed on the Sex Offenders Register for ten years and made subject to a ten-year Sexual Harm Prevention Order.

How the Investigation Started

Humberside Police’s dedicated Police Online Investigation Team, known as POLIT, received information in March 2024 suggesting Greaves was suspected of possessing indecent images of children.

POLIT is Humberside’s specialist unit for investigating online offenses, including those involving child sexual abuse material. The team operates alongside the force’s Digital Forensics Unit (DFU), which handles the technical analysis of seized devices. Together, they play a major role in how UK police forces identify and prosecute online offenders.

Following the tip-off, officers arrested Greaves at his in March 2024. Officers seized 76 separate devices, including mobile phones, computers, hard drives, and servers. The range and variety of storage devices suggested a systematic, long-term operation rather than incidental possession.

The Forensic Challenge: 76 Devices, 110,000 Files

The volume of material found presented an immediate operational problem. Examining 76 devices in full, each potentially holding thousands of files, is not a task investigators can complete by simply working through a list. The files require specialist tools to identify, categorize, and document for prosecution purposes.

PC Sophie Newbon, who led the investigation within POLIT, explained: “Investigations of this nature are extremely complex, and I commend the POLIT and DFU officers for their patience and determination in developing the most comprehensive digital strategy to put a substantial amount of evidence before the courts, leading Greaves to decide to plead guilty.”

Investigators developed a specific digital strategy to determine which of the 76 devices to prioritize. Investigators then examined seven devices in full detail. The material from those seven devices, more than 100,000 images and videos, was submitted to the Crown Prosecution Service as the evidentiary basis of the case.

The approach reflects how digital forensics units handle large-scale device seizures: a targeted examination of the most significant devices, supported by a documented methodology that can withstand scrutiny in court. This kind of structured forensic strategy is increasingly important in cases where the sheer volume of material could otherwise overwhelm an investigation.

The Dark Web Angle: Why Anonymity Wasn’t Protection

PC Newbon was direct in her statement how Greaves sourced the material. “The sheer volume of images and videos that Greaves had collected of young children using the dark web in an attempt to get away with his disgusting behavior was absolutely appalling.”

The dark web, accessible via the Tor network, routes internet traffic through multiple servers to obscure a connection’s origin. Offenders use it because they believe this anonymity protects their identity. In some cases, it creates short-term barriers for investigators. But it does not eliminate the digital evidence left on a person’s own devices, and it did not protect Greaves.

As we covered in our piece on Operation Alice, the international takedown of 373,000 dark web sites, including platforms specifically advertising child sexual abuse material, law enforcement has developed sustained capability for identifying both the operators of these platforms and the individuals who use them. In that case, 440 customers were identified from payment records, even though the platforms operated within the Tor network.

Greaves’s case illustrates the same principle at a local level. The dark web gave him confidence. Humberside Police’s POLIT unit received a report his suspected activities, and the evidence on his own devices was extensive enough to produce a guilty plea.

The Sentence and What It Includes

The two-year suspended sentence means Greaves will not go to prison immediately, but the suspension comes with conditions and consequences. The 200 hours of unpaid work and 20 rehabilitation days represent structured programs courts use alongside suspended sentences when the offending is serious, but imprisonment is not imposed outright.

The Sexual Harm Prevention Order (SHPO), in force for ten years, can place specific restrictions on Greaves, covering internet access, with children, and use of electronic devices. Breaching an SHPO is a criminal offense. The Sex Offenders Register requirement means he must notify police of changes to his name, address, and travel plans, and police can conduct visits and checks.

For an offense of this scale- nine and a half years of collection, over 110,000 files, 76 devices- the sentence will prompt questions from those who follow child protection cases. UK sentencing for indecent image offenses follows the Sentencing Council’s guidelines, which consider the category of images, the volume of material, and any aggravating or mitigating factors. A suspended outcome typically reflects the court’s assessment of the case’s specific circumstances.

How to Report Concerns Online Child Sexual Abuse Material

If you encounter content that sexualises children online, or have concerns an individual’s behavior towards children, there are established routes for reporting.

In the UK, the Internet Watch Foundation (IWF) accepts reports of child sexual abuse material online, including content hosted on the dark web. The IWF works with platforms and law enforcement to remove content and identify those behind it.

Humberside Police’s POLIT accepts reports via the non-emergency number 101. Always dial 999 if a child is in immediate danger.

The Child Exploitation and Online Protection command (CEOP) , a part of the National Crime Agency, operates a specific reporting portal at ceop.police.uk for concerns online grooming, exploitation, and indecent images of children. Their safety center guides children, young people, and adults with concerns.

For concerns online behavior more broadly, including suspicious approaches to children on social media or gaming platforms, the NSPCC helpline is available at 0808 800 5000.

Frequently Asked Questions

Who is Daniel Greaves?

A 35-year-old man from Patrington, East Yorkshire, sentenced at Hull Crown Court on September 28, 2026, for collecting indecent images of children.

What was the sentence?

A two-year suspended sentence, 200 hours of unpaid work, 20 rehabilitation days, ten years on the Sex Offenders Register, and a ten-year Sexual Harm Prevention Order.

How many images were found?

Police found more than 110,000 images and videos of children across 76 devices. Police collected the material over nine and a half years.

How did police catch him?

Humberside Police’s Police Online Investigation Team (POLIT) received a tip-off in March 2024 suggesting Greaves was suspected of possessing indecent images. Police arrested him at his address and seized devices for examination.

Did he use the dark web?

Yes. PC Sophie Newbon, who led the investigation, confirmed that Greaves “used the dark web in an attempt to get away with his disgusting behavior.”

Written by Muhammad Anas

Contributing writer at DarkWebDecoded.com covering dark web security, scam alerts, and privacy tools.

SriLankan Airlines: A New Ransomware Group Is Claiming It Stole Engine Records, Flight Databases, and Staff Credentials

BLACKNET-00 claims to have breached SriLankan Airlines and extracted credentials for flight operations systems, internal databases, employee records,…

Flink Was Breached And Now Hackers Are Emailing Its Customers for Ransom Too

LPG Group breached Flink using compromised employee login credentials and accessed an internal system containing names, email addresses,…

LLM-Jacking: The Dark Web Is Now Selling AI Access at 97% Off

Google’s Threat Intelligence Group has warned of a surge in two related AI-access attacks: credential theft targeting AI…

Fraudsters Are Using Vacant Homes to Steal Your Mail. Here’s the Full Playbook.

Threat actors are identifying vacant homes using platforms like Zillow and Rightmove, registering for USPS Informed Delivery at…

A New AI System Reads the Dark Web the Way Human Analysts Do Across Text and Images at Once

Researchers at G.H. Raisoni University published a study in Neural Computing and Applications this week describing a multimodal…

Fujitsu and KELA Are Bringing Dark Web Intelligence to Japan’s Corporate Security Front Line

Fujitsu Limited launched a three-component cybersecurity service on September 25, 2026, combining dark web monitoring, attack surface management,…

Extracted Entities

Attack Types (1)

Campaigns (1)

Ransomware Groups (2)