Cyber Incident Victim: Rio 2016 Olympics
Timeline
Summary
Anonymous Brazil conducted cyber attacks against government and Olympic-related websites during the Rio Olympics opening ceremony, forcing several offline through DDoS attacks. The group subsequently leaked personal, financial, and login credentials from multiple Brazilian sports confederations, including hashed passwords, while also claiming to expose sensitive information of high-profile officials and businessmen allegedly involved in corruption. They urged supporters to employ Tor and participate in further DDoS campaigns, framing their actions as ongoing efforts to expose systemic corruption and arbitrary state actions, mirroring previous protests against major sporting events hosted in the country.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 2 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On August 5, 2016, coinciding with the Rio Olympics opening ceremony, the hacktivist group Anonymous Brazil launched distributed denial-of-service (DDoS) attacks against multiple Brazilian government and Olympic-related websites. The primary targets included brasil2016.gov.br (the federal government's official Olympics site), rj.gov.br (Rio de Janeiro State Government portal), esporte.gov.br (Ministry of Sports), cob.org.br (Brazil Olympic Committee), and rio2016.com (official Olympics site). These sustained attacks forced several critical platforms offline during a high-visibility global event, disrupting digital services for an unspecified duration. The group publicly claimed responsibility while the ceremonies were underway, framing the operation as a protest against perceived government corruption and mismanagement related to the Games.
In a secondary phase, Anonymous escalated operations by exfiltrating and leaking sensitive data from four sports confederation domains: pentatlo.org.br (Modern Pentathlon), brasilhandebol.com.br (Handball), cbboxe.com.br (Boxing), and cbtri.org.br (Triathlon). The compromised data included personal details, financial records, and login credentials with hashed passwords of registered users. The group separately claimed to have leaked personal information of high-profile individuals including Rio de Janeiro's Mayor, the State Governor, the Minister of Sport, the Brazilian Olympic Committee President, and three unnamed businessmen allegedly involved in corruption. Anonymous disseminated calls for public participation via social media, urging supporters to employ Tor anonymity tools and conduct additional DDoS attacks against Brazilian targets. By August 6, all affected websites had been restored to operational status. This incident followed Anonymous Brazil's 2014 protests against FIFA World Cup policies, demonstrating a pattern of targeting major sporting events to advance anti-corruption and anti-establishment agendas.