Cyber Incident Victim: Santos Dumont Airport
Date:
May 2022
Location:
Brazil
Summary
Screens at Rio de Janeiro's Santos Dumont Airport displayed pornographic content in an apparent hacking incident, triggering widespread social media reactions ranging from outrage over potential exposure of children to humorous commentary. The affected monitors were advertising displays operated by a private contractor rather than official airport information systems. The airport operator Infraero initiated legal proceedings, reported the incident to federal police, and mandated all such screens remain deactivated until the responsible company could ensure their security against unauthorized access.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On May 27, 2022, multiple advertising screens at Rio de Janeiro's Santos Dumont Airport began displaying explicit pornographic films instead of regular content, disrupting normal operations and alarming travelers. The incident first gained public attention through social media posts from airport visitors who documented the explicit videos playing on monitors in terminal areas. Travelers expressed shock and amusement on platforms like Twitter, with comments ranging from jokes about missed flights due to distractions to sarcastic references rebranding the facility as "Santos Dumont Airporn." The unauthorized content display occurred during operational hours, exposing passengers—including families with children—to sexually explicit material not suitable for public environments. Initial reports characterized the event as an apparent hack targeting the advertising network infrastructure.

Brazilian airport operator Infraero responded by clarifying that the compromised screens were privately managed advertising displays, not official flight information or operational systems under their direct control. The company initiated legal proceedings by filing a formal case with federal police to investigate the breach. As an immediate containment measure, Infraero ordered all monitors operated by the third-party advertising provider to remain powered off across its national airport network until the contractor could demonstrate enhanced security safeguards. Public reactions remained divided, with some social media users condemning the incident as disrespectful to families and travelers, while others treated it as dark humor consistent with Rio de Janeiro's culturally liberal reputation. The disruption did not affect flight operations or critical airport systems but highlighted vulnerabilities in peripheral digital infrastructure managed by external vendors.
