Cyber Incident Victim: Government of Brazil
Date:
Aug 2016
Location:
Brazil
Summary
Anonymous Brazil conducted DDoS attacks against Brazilian government websites hosting Olympics-related services, causing significant downtime during the event's opening ceremonies. The group subsequently leaked sensitive personal, financial, and login credentials—including hashed passwords—from multiple national sports confederations. They also claimed to have exposed private information of high-profile officials and businessmen, alleging corruption ties. The hacktivists encouraged public participation in further attacks using Tor, framing their actions as ongoing protests against perceived government abuses linked to major sporting events, echoing prior demonstrations against international competitions hosted in the country.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On August 5, 2016, coinciding with the opening ceremony of the Rio de Janeiro Olympics, the hacktivist group Anonymous Brazil launched distributed denial-of-service (DDoS) attacks against multiple Brazilian government and Olympic-related websites. The initial wave disrupted access to high-profile targets including the federal government's official 2016 Games portal (brasil2016.gov.br), the Rio de Janeiro State Government portal (rj.gov.br), the Ministry of Sports (esporte.gov.br), the Brazilian Olympic Committee (cob.org.br), and the primary Rio 2016 Olympics website (rio2016.com). These attacks forced several sites offline during peak global viewership of the ceremony. Anonymous framed the operation as a protest against systemic corruption and misuse of public funds related to the Olympics, echoing their 2014 opposition to FIFA World Cup expenditures. The group released a video statement vowing to "unmask the numerous arbitrary actions" of officials they deemed enemies of the population.
In a secondary phase, Anonymous exfiltrated and leaked sensitive data from Brazilian sports organizations, including the Brazilian Confederation of Modern Pentathlon (pentatlo.org.br), Brazilian Handball Confederation (brasilhandebol.com.br), Brazilian Confederation of Boxing (cbboxe.com.br), and Brazilian Triathlon Confederation (cbtri.org.br). Leaked CSV files contained registered users' personal information, financial records, login credentials, and hashed passwords. The group also claimed to disclose personal details of high-profile individuals including Rio's Mayor, Rio's Governor, the Minister of Sport, the Brazilian Olympic Committee President, and three unnamed businessmen allegedly involved in corruption schemes. Anonymous publicly urged supporters to amplify attacks using Tor anonymity tools and volunteer-driven DDoS campaigns. By August 6, all affected websites had been restored to operational status, though the data breaches remained active exposures. The incident marked a continuation of Anonymous Brazil's pattern of targeting large-scale sporting events to protest perceived government mismanagement and elite corruption.