Cyber Incident Victim: Expo 2015
Date:
May 2015
Location:
Italy
Summary
A cyberattack attributed to Anonymous Italy disrupted the official website of a major international event, specifically targeting its ticketing section and causing temporary unavailability. The website was restored shortly after the incident, though this followed a separate prior outage affecting ticket purchases due to unrelated server issues. The hacktivist group publicly claimed responsibility for the attack shortly before the event's opening.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 3 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On May 1, 2015, hours before the scheduled opening of the Milan Expo 2015, the event's official website experienced a cyberattack claimed by the hacktivist group Anonymous Italy. The attackers targeted the ticketing section of the Expo 2015 platform, rendering it inaccessible to users for several minutes. This disruption occurred during a critical operational period as the international exhibition prepared to welcome visitors. The group publicly claimed responsibility for the attack, though the article does not specify their stated motivations or the exact techniques employed. Expo technicians restored full website functionality shortly after the incident concluded.
This incident followed an earlier service interruption three days prior to the attack, when the same ticket purchasing portal had been unreachable for approximately one hour due to unrelated server technical issues. No actor claimed responsibility for that initial outage, which was attributed to internal infrastructure problems rather than malicious activity. The Expo organization did not publicly disclose whether forensic investigations linked the two incidents or identified additional compromised systems beyond the ticketing platform. Following the Anonymous attack, officials confirmed the website's restoration but provided no details about implemented security enhancements or ongoing mitigation efforts. The temporary unavailability of the ticketing portal represented the primary confirmed operational impact of both service disruptions.