Cyber Incident Victim: Dubai Police
Date:
Feb 2014
Location:
United Arab Emirates
Summary
The official social media accounts of Dubai Police were compromised by a group identifying as TheHorsemen, who gained unauthorized access to platforms including Twitter, Pinterest, LinkedIn, and Tumblr. Attackers posted screenshots confirming the breach and a message alleging surveillance by the organization, later removing the content. While the police did not publicly address the incident, the Dubai Media Office acknowledged a cyberattack targeting the accounts. The intrusion formed part of a broader campaign known as OpDubai, which had previously disrupted multiple government websites in the United Arab Emirates.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
In February 2014, the Dubai Police suffered a cybersecurity incident involving the compromise of multiple official social media accounts. A group identifying itself as TheHorsemen hijacked the organization’s Twitter, Pinterest, LinkedIn, and Tumblr profiles, demonstrating unauthorized access by publishing screenshots as evidence of their control. The attackers utilized the compromised Twitter account to post a message accusing Dubai Police of surveillance activities, stating: “Dubai Police is spying on you, Isn’t it fair that we the people do the same back?” This defacement temporarily disrupted the agency’s official communications through these platforms. The incident gained public visibility when the hackers’ tweet appeared on the verified Dubai Police account, though the post was subsequently removed. No details were provided regarding the duration of the compromise or the specific methods used to gain access to the accounts.
The Dubai Police did not immediately issue an official statement regarding the breach. However, the Dubai Media Office acknowledged the incident, confirming that the social media accounts had been “subject to a cyberattack.” The attack was linked to a broader campaign named OpDubai, which TheHorsemen had initiated in late 2013. This operation previously targeted multiple United Arab Emirates government websites, causing disruptions to their online services. The compromise of Dubai Police’s social media represented an escalation in tactics, shifting from website disruptions to direct account takeovers. No further technical details about remediation efforts were disclosed, nor were any impacts beyond the temporary account control and defacement described in available reports. The incident highlighted vulnerabilities in the social media infrastructure of a high-profile government entity during this period.