CSIDB logo
Incident

Regione Basilicata

Incident posture

Attack window
Feb 2016
Location
Italy
Status
Historical
CIA posture
Available to members
Updated
2025-12-11 00:00

Linked entities

Victim
Regione Basilicata
Threat actors
1 actor
Sources
1 source

Timeline

Occurred
Feb 2016
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

Anonymous Italy conducted cyberattacks targeting government portals of the Apulia and Basilicata regions, employing DDoS attacks to disrupt services. The collective infiltrated Apulia's site to deface it, while Basilicata experienced temporary DDoS disruption. These actions protested Italy's involvement in the Trans Adriatic Pipeline project, which activists claimed threatened environmental and cultural heritage sites. The attacks highlighted opposition to the gas pipeline's perceived ecological risks and impact on historical landmarks.

Motives

Detailed motive labels are available to members.

2 motives

TTPs

Detailed technique labels are available to members.

1 technique

Description

In February 2016, the Italian branch of the Anonymous hacker collective conducted cyberattacks targeting government portals of the Apulia and Basilicata regions in southern Italy. The attacks occurred over a weekend, with initial operations focusing on the Apulia regional government’s website. Anonymous launched a distributed denial-of-service (DDoS) attack against Apulia’s portal, overwhelming its infrastructure and causing service disruption. The group then exploited this disruption as cover to gain unauthorized access to the system, deploying a defacement message on the compromised site. IT administrators eventually detected the intrusion and took the portal offline to contain the breach and mitigate further damage. Simultaneously, Anonymous directed a separate DDoS attack against the Basilicata regional government’s web portal. Unlike the Apulia incident, this attack did not involve system infiltration or defacement. The Basilicata portal experienced temporary downtime due to the DDoS bombardment but resumed normal operations after the attack subsided.

The attacks were explicitly linked by Anonymous to opposition against Italy’s participation in the Trans Adriatic Pipeline (TAP) project, a natural gas infrastructure initiative spanning from Azerbaijan through Turkey, Greece, Albania, and Italy to Western Europe. Hackers publicized their motivations through tweets, blog posts, and the defacement message, condemning the project’s environmental risks and its perceived threat to historical landmarks in Apulia, including UNESCO-protected sites. The TAP project, which began construction in 2015 and aimed for completion by 2019, was designed to transport up to 10 billion cubic meters of gas annually. The cyberattacks disrupted regional government services temporarily, with Apulia requiring extended downtime for forensic analysis and security remediation following the defacement. No data theft or permanent damage was reported, but the incidents highlighted vulnerabilities in regional IT infrastructure. Anonymous framed its actions as ecological hacktivism, aligning with local critics who argued the pipeline prioritized economic interests over cultural and environmental preservation.

Sources

Sources available to members: 1 source.

CSIDB