Cyber Incident Victim: Regione Basilicata
Date:
Feb 2016
Location:
Italy
Summary
Anonymous Italy conducted cyberattacks targeting government portals of the Apulia and Basilicata regions, employing DDoS attacks to disrupt services. The collective infiltrated Apulia's site to deface it, while Basilicata experienced temporary DDoS disruption. These actions protested Italy's involvement in the Trans Adriatic Pipeline project, which activists claimed threatened environmental and cultural heritage sites. The attacks highlighted opposition to the gas pipeline's perceived ecological risks and impact on historical landmarks.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
In February 2016, the Italian branch of the Anonymous hacker collective conducted cyberattacks targeting government portals of the Apulia and Basilicata regions in southern Italy. The attacks occurred over a weekend, with initial operations focusing on the Apulia regional government’s website. Anonymous launched a distributed denial-of-service (DDoS) attack against Apulia’s portal, overwhelming its infrastructure and causing service disruption. The group then exploited this disruption as cover to gain unauthorized access to the system, deploying a defacement message on the compromised site. IT administrators eventually detected the intrusion and took the portal offline to contain the breach and mitigate further damage. Simultaneously, Anonymous directed a separate DDoS attack against the Basilicata regional government’s web portal. Unlike the Apulia incident, this attack did not involve system infiltration or defacement. The Basilicata portal experienced temporary downtime due to the DDoS bombardment but resumed normal operations after the attack subsided.
The attacks were explicitly linked by Anonymous to opposition against Italy’s participation in the Trans Adriatic Pipeline (TAP) project, a natural gas infrastructure initiative spanning from Azerbaijan through Turkey, Greece, Albania, and Italy to Western Europe. Hackers publicized their motivations through tweets, blog posts, and the defacement message, condemning the project’s environmental risks and its perceived threat to historical landmarks in Apulia, including UNESCO-protected sites. The TAP project, which began construction in 2015 and aimed for completion by 2019, was designed to transport up to 10 billion cubic meters of gas annually. The cyberattacks disrupted regional government services temporarily, with Apulia requiring extended downtime for forensic analysis and security remediation following the defacement. No data theft or permanent damage was reported, but the incidents highlighted vulnerabilities in regional IT infrastructure. Anonymous framed its actions as ecological hacktivism, aligning with local critics who argued the pipeline prioritized economic interests over cultural and environmental preservation.