Cyber Incident Victim: Confederação Brasileira de Boxe
Date:
Aug 2016
Location:
Brazil
Summary
A hacktivist group conducted DDoS attacks against Brazilian government and Olympic-related websites during the Rio Games, causing temporary outages. The attackers subsequently leaked personal, financial, and login credentials from multiple sports organizations including the Brazilian Confederation of Boxing, exposing hashed user passwords. They also released sensitive information belonging to high-profile officials and businessmen allegedly involved in corruption, while publicly urging further disruptive actions against Brazilian online assets. The incident mirrored previous protests against major sporting events in the country, with operations framed as exposing elite misconduct.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 2 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On August 6, 2016, during the opening ceremony of the Rio Olympics, the hacktivist group Anonymous Brazil launched distributed denial-of-service (DDoS) attacks against multiple Brazilian government and Olympic-related websites. The primary targets included brasil2016.gov.br (the federal government's official Olympics site), rj.gov.br (Rio de Janeiro's state government portal), esporte.gov.br (Ministry of Sports), cob.org.br (Brazilian Olympic Committee), and rio2016.com (official Olympics site). These coordinated attacks forced several sites offline during a period of high global visibility. In a secondary phase of operations, Anonymous exfiltrated and leaked sensitive data from four sports confederation domains: the Brazilian Confederation of Modern Pentathlon (pentatlo.org.br), Brazilian Handball Confederation (brasilhandebol.com.br), Brazilian Confederation of Boxing (cbboxe.com.br), and Brazilian Triathlon Confederation (cbtri.org.br). The leaked CSV files contained personal information, financial records, login credentials, and hashed passwords of registered users. The group additionally claimed to have compromised and published personal details of high-profile individuals including Rio's Mayor, Rio's Governor, the Minister of Sport, the President of the Brazilian Olympic Committee, and three unnamed businessmen allegedly involved in corruption. Anonymous publicly urged supporters to amplify the disruption by using Tor anonymity tools to conduct further DDoS attacks against Brazilian digital infrastructure.
The attacks represented an escalation of Anonymous Brazil's longstanding opposition to major sporting events hosted in Brazil, having previously protested the 2014 FIFA World Cup through both street demonstrations and cyber operations targeting FIFA's Brazilian website. While the immediate technical impact involved temporary unavailability of targeted websites, the broader consequences included exposure of sensitive personal and institutional data across multiple sporting organizations. The Brazilian Confederation of Boxing's digital assets (cbboxe.com.br) were specifically compromised alongside other niche sporting bodies, indicating a deliberate expansion beyond high-profile government targets. By the time media reported the incident, all affected websites had been restored to operational status. Anonymous framed the attacks as part of an ongoing campaign against state corruption and elite exploitation, vowing in a video statement to continue operations aimed at exposing "arbitrary actions of those who are state enemies." No specific defensive measures or law enforcement responses were detailed in available reporting, though the restoration timeline suggests incident response teams addressed the availability attacks promptly. The incident highlighted vulnerabilities in both government and sports organization infrastructure during internationally significant events.