Cyber Incident Victim: Sao Paulo State Government
Date:
Jan 2014
Location:
Brazil
Summary
An Anonymous hacker compromised the official email account of São Paulo State Government's press department, sending messages to Brazilian media outlets declaring the breach and asserting control over digital spaces. The attacker, operating under the alias @AnonManifest, claimed the intrusion through both the hijacked communications and social media posts criticizing government-aligned traditional media. While no explicit motive was confirmed, the incident was linked to broader Anonymous operations potentially protesting police violence against World Cup demonstrators and contesting institutional authority. The hack disrupted official communications and demonstrated unauthorized access to sensitive government channels.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On January 28, 2014, an individual using the Anonymous-affiliated handle @AnonManifest compromised the official email account of the São Paulo State Government’s press and communication department. The attacker targeted the address "[email protected]," which belonged to one of the government’s press spokespersons. Shortly after the breach, major Brazilian media outlets received an email from this compromised account containing a message signed by Anonymous. The email declared, "Your System has been Hacked! Seems that the state government of São Paulo was hacked," publicly confirming the intrusion. The hacker reinforced this claim through a tweet from @AnonManifest’s account, stating, "Traditional media belongs to the government but the Internet belongs to us (Anonymous)." The tweet included a link to proof of the hack, though the specific content of that link was not detailed in available reports. The São Paulo government’s official website (saopaulo.sp.gov.br) was referenced as the affected entity, but the full technical scope of the intrusion—such as whether other systems were compromised—remained unverified.
The motive behind the attack was not explicitly confirmed by the hacker at the time of reporting. Media speculation suggested potential connections to Anonymous’s opposition to the upcoming FIFA World Cup in Brazil and allegations of police brutality against protesters demonstrating against the event. The compromised email account served as a channel to disseminate the hacker’s message to media organizations, but no additional disruptive actions—such as data theft, system manipulation, or secondary breaches—were disclosed in initial accounts. The São Paulo government did not release an official statement regarding incident response, containment measures, or system recovery in the immediate aftermath. The hacker’s direct communication with media outlets underscored the operational impact of the breach, though its broader consequences for government operations or data security were not elaborated in available sources. Investigations into the incident’s scope and origins were ongoing at the time of reporting.