On 9 November 2026 Judge Victor Marrero of the US District Court for the Southern District of New York entered a default judgment for thirteen book and journal publishers against the shadow library WeLib. The case is Apress Media, LLC et al v. WeLib and Does 1-10, No. 1:26-cv-05064-VM-VF, and the judgment is ECF No. 23. The procedural history recited in the order is short: the complaint for direct copyright infringement was filed on 16 June 2026; the defendants were served by electronic mail on 14 July 2026 under an order of 13 July 2026 permitting service by electronic means; they never answered; the Clerk entered a certificate of default on 19 August 2026; and the publishers moved for default judgment on 12 October 2026. The plaintiffs are Apress, Cengage, Elsevier, Hachette, HarperCollins, John Wiley & Sons, Bedford, Freeman & Worth (Macmillan Learning), Macmillan Publishing Group, McGraw Hill, Pearson Education, Penguin Random House, Simon and Schuster, and Taylor & Francis.
Paragraph 3 awards each of the thirteen plaintiffs the maximum statutory damages for wilful infringement under 17 U.S.C. § 504(c)(2) — $150,000 for each of the ten works listed for that plaintiff on Exhibit A to the complaint. That is $1.5 million per publisher and $19.5 million in total. Paragraph 4 adds the § 503(b) relief: immediate destruction of all unauthorised copies, and a sworn report to the court within ten business days of service giving valid contact details for WeLib and for each of its managing agents. Paragraph 5 permanently enjoins the defendants, anywhere in the world, from hosting, indexing, linking to or otherwise exploiting the publishers’ works, and from transferring the registrations of welib.org, welib.st and welib-public.org. The order grounds that relief in Federal Rule of Civil Procedure 65(b), the All Writs Act (28 U.S.C. § 1651), 17 U.S.C. § 502(a) and the court’s inherent equitable powers. TorrentFreak, which published the signed order, reports that Judge Marrero granted the publishers’ proposed judgment without changes, and that the WeLib domains were still resolving when it went to press.
The damages are symbolic. Paragraph 6 is the remedy
Nobody expects to collect $19.5 million from an anonymous operator, and the order effectively concedes the point by also ordering the defendants to identify themselves. What makes this judgment worth reading is paragraph 6, which does not run against the defendants at all. It commands all domain name registries and registrars of record for the WeLib domains, and all hosting and internet service providers for the sites, upon gaining knowledge of this Judgment by service, actual notice, or otherwise, to permanently disable the domains through a registry hold or otherwise, to block their transfer to anyone other than the plaintiffs, to disable the authoritative nameservers, to stop hosting those sites or any other site hosting the infringing content or directly facilitating its distribution, to preserve all evidence capable of identifying the operators, and to refrain from frustrating implementation. Paragraph 7 then names, for the avoidance of doubt, Public Interest Registry, Cloudflare Inc., Tucows Domains Inc., Njalla SRL and Njalla Okta LLC — and extends to any other registry, registrar, host or ISP for those domains “now or in the future”.
That drafting shifts the entire enforcement burden from collection to notice. Once the judgment exists, the rights owner’s job is to put it in front of each intermediary and document that it was received; the obligation attaches on actual notice rather than on being named as a party. If you are planning this kind of action, treat the service-and-notice programme as the real remedy and budget for it: a list of every registry, registrar, nameserver operator, CDN and host in the chain, refreshed after judgment, with proof of delivery for each. Paragraph 8 completes the structure — the defendants can only ask to be released from the domain-transfer and intermediary provisions once the damages are paid in full and the injunction has been complied with, which in practice makes the domain seizure permanent.
Your statutory damages ceiling was set years before the complaint
The arithmetic here is worth sitting with. The award tracked the works in suit, not the scale of the library: ten works per plaintiff, at the statutory maximum, thirteen times over. TorrentFreak reports that the same $19.5 million total came out of Judge Jed S. Rakoff’s May 2026 default judgment against Anna’s Archive on a schedule of 130 works. Same number, different construction — which tells you the figure is a function of how the complaint is assembled, and of which works could carry statutory damages at all. Under 17 U.S.C. § 412 statutory damages are available only where registration preceded the infringement or followed first publication within three months, so the ceiling on an award like this is fixed by a registration programme running years before anyone drafts a pleading. If your catalogue is turning up on shadow libraries, the useful work this quarter is an inventory of which commercially significant titles carry timely US registrations, and a docketed habit of registering new ones inside the three-month window. Works that miss it are not worthless in litigation, but they are worth actual damages you have to prove rather than a number the court can simply multiply.
Anonymity did not stop the judgment, and the judgment keeps hunting the identity
The sequence the publishers used — court-approved service by email, clerk’s default, then a motion that asks for everything — is now a signed template for proceeding against an operator you cannot name. Three provisions keep the identification question alive after judgment: the ten-business-day sworn report naming WeLib’s managing agents, the paragraph 6(d) obligation on intermediaries to preserve identifying evidence, and paragraph 10’s retention of jurisdiction to enter further orders to enforce. Realistically, an operator who has stayed anonymous through the merits will ignore the report. The preservation duty on the US-based intermediaries is the provision with teeth, because it freezes the records a post-judgment subpoena would target. Build that order before the data ages out.
The constraint is jurisdiction, not the wording
Public Interest Registry, which runs .org, and Cloudflare are US entities within the court’s reach. Most of the rest of the chain is not. TorrentFreak notes that Anna’s Archive survived an equivalent order by operating on .gl, .pk and .gd domains tied to registries and registrars outside the United States, and that at the time of its report WeLib’s domains were still loading. The planning point is to map the TLDs before drafting the schedule: an order aimed at a registry in a jurisdiction that will not act produces a press release, not a takedown, and the operator simply re-points the brand to a new ccTLD. Where the money matters more than the domain, the better path is usually to trace the payment and advertising intermediaries instead.
You get the order you draft
Because Judge Marrero signed the proposed judgment as submitted, every word of this remedy came from the publishers’ own drafting — including, as TorrentFreak points out, a clause barring the defendants from enabling third parties to make the works available “including via BitTorrent”, carried over from the Anna’s Archive papers although nothing in the WeLib complaint alleges BitTorrent use. Reusing a successful proposed order is efficient and it worked here, but a mismatched clause is exactly what a non-party intermediary’s counsel reaches for when deciding whether an order addressed to the world really obliges them to act. Keep the conduct clauses anchored to pleaded facts and the domain schedule exact. If you are scoping an enforcement action and need the infringement, the works and the intermediary chain documented to the standard a court will sign off on, that evidence work is what our infringement analysis service is built for.