Cyber Incident Victim: Charlottesville City
Date:
Aug 2017
Location:
United States of America
Summary
A distributed denial-of-service (DDoS) attack targeted the official website of Charlottesville City, rendering it offline following a violent car attack during a white supremacist rally that resulted in casualties among counter-protesters. The hacktivist group Anonymous, operating under the campaign OpDomesticTerrorism, claimed responsibility, with its affiliate New World Hackers executing the attack to protest perceived police inaction during the physical violence. The attackers asserted their actions as a response to systemic failures in protecting citizens and a stand against fascism, emphasizing direct action over institutional remedies. The website experienced prolonged downtime, with intermittent slow access for some users, while Anonymous-linked accounts publicly endorsed the operation as a form of digital retaliation against domestic terrorism and government complicity.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 2 actors | Available to members | Available to members |
Description
On August 12, 2017, the online hacktivist collective Anonymous executed a distributed denial-of-service (DDoS) attack against the official website of Charlottesville, Virginia, under the operation name OpDomesticTerrorism. The attack rendered the city’s website inaccessible for an extended period, with third-party monitoring service Isitdownrightnow confirming the outage. Anonymous publicly claimed responsibility through affiliated Twitter accounts @YourAnonGlobal and @dreamer8five, posting "TangoDown" notifications with hashtags #OpDomesticTerrorism and #DefendCville. The group’s action was a direct response to a vehicular attack earlier that day during the "Unite the Right" rally, where a car plowed into counter-protesters, resulting in one fatality and multiple injuries. Mayor Mike Signer confirmed the death, while eyewitness Brennan Gilmore documented the incident on Twitter, characterizing it as deliberate terrorism. Anonymous cited law enforcement’s perceived failure to protect citizens during the rally as motivation for the cyberattack.

New World Hackers (NWH), a subgroup operating under the Anonymous banner, specifically claimed involvement in the DDoS operation through direct communication with media outlet HackRead.com. NWH members stated the attack targeted Charlottesville’s digital infrastructure to protest police inaction during the physical violence, asserting their intent to "deliver justice" against white supremacist groups and government entities. The hackers referenced their prior disruptive campaigns, including a 2016 DDoS attack against HSBC UK that disrupted payroll systems. Anonymous’ @YourAnonGlobal account framed the operation as a necessary escalation against fascism, arguing traditional political channels had failed. Prominent Anonymous-affiliated Twitter handle @YourAnonNews amplified the operation by retacking attack announcements, condemning both the vehicular assault and law enforcement’s response. The city website remained partially nonfunctional during the initial attack window, with intermittent slow loading reported for some users, though full restoration timelines were not disclosed in available reports.
