Cyber Incident Victim: Government of Rio de Janeiro
Date:
Aug 2016
Location:
Brazil
Summary
Anonymous Brazil conducted DDoS attacks against multiple Brazilian government websites during the Rio Olympics opening ceremony, causing service disruptions to platforms including the federal Olympics portal, Rio state government site, and sports ministry. The group subsequently leaked personal, financial, and login credentials from several national sports confederations, exposing hashed passwords and sensitive data. They additionally claimed to have compromised personal information of high-ranking officials such as the Governor of Rio de Janeiro, the Minister of Sport, and Olympic Committee leadership, while publicly urging supporters to employ Tor browser for further DDoS actions. The hacktivists framed their operations as ongoing efforts to expose systemic corruption and arbitrary governance practices, continuing a pattern of cyber protests against major sporting events in Brazil.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 3 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On August 6, 2016, during the opening ceremony of the Rio Olympics, the hacktivist group Anonymous Brazil launched coordinated distributed denial-of-service (DDoS) attacks against multiple Brazilian government and Olympic-related websites. The initial wave of attacks disrupted access to the federal government's official 2016 Games portal (brasil2016.gov.br), the Rio de Janeiro State Government portal (rj.gov.br), the Ministry of Sports (esporte.gov.br), the Brazilian Olympic Committee (cob.org.br), and the Rio 2016 Olympics official website (rio2016.com). These attacks forced several sites offline during a period of high global visibility. In a subsequent phase, Anonymous exfiltrated and leaked sensitive data from four Brazilian sports confederation domains: the Brazilian Confederation of Modern Pentathlon (pentatlo.org.br), Brazilian Handball Confederation (brasilhandebol.com.br), Brazilian Confederation of Boxing (cbboxe.com.br), and Brazilian Triathlon Confederation (cbtri.org.br). The leaked CSV files contained personal information, financial records, login credentials, and hashed passwords of registered users. The group further claimed to have compromised and published personal details of high-profile individuals including the Mayor of Rio de Janeiro, the Governor of Rio de Janeiro, the Minister of Sport, the President of the Brazilian Olympic Committee, and three unnamed businessmen allegedly involved in corruption schemes.
Anonymous Brazil publicly justified their actions as a protest against the Rio Olympics, releasing a video statement declaring their intent to "unmask the numerous arbitrary actions of those who are state and therefore its own population enemies." The group encouraged supporters to use Tor anonymity tools and participate in additional DDoS attacks against Brazilian digital infrastructure. This incident followed established patterns of hacktivism by the collective, echoing their 2014 protests against FIFA World Cup policies in Brazil when they defaced the World Cup website after authorities banned Guy Fawkes masks in Rio. By the time media reported the incident, all affected websites had been restored to operational status. The attacks caused temporary service disruptions during a major international event but did not halt Olympic operations. The data breaches exposed sensitive personal and institutional information, creating potential reputational and security risks for targeted individuals and organizations. No specific countermeasures beyond website restoration were detailed in available reports.