Cyber Incident Victim: Prefeitura da Cidade do Rio de Janeiro
Date:
Aug 2016
Location:
Brazil
Summary
A cyberattack during the Rio Olympics targeted Brazilian government and Olympic-related websites, causing outages through DDoS attacks. Hacktivists leaked personal, financial, and login credentials from multiple sports confederations, including hashed passwords, and exposed personal details of high-profile officials such as the Mayor of Rio de Janeiro, the Governor, and Olympic Committee leadership. The attackers urged public participation in further disruptions via Tor and DDoS tools, framing their actions as a protest against corruption and misuse of public resources tied to the event. This followed prior hacktivist campaigns against major sporting events in Brazil, emphasizing ongoing opposition to perceived government misconduct.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On August 5, 2016, coinciding with the opening ceremony of the Rio Olympics, the hacktivist group Anonymous Brazil launched coordinated cyberattacks against multiple Brazilian government and Olympic-related websites. The initial phase involved distributed denial-of-service (DDoS) attacks that overwhelmed critical online infrastructure, forcing several high-profile sites offline. Affected targets included the federal government's official Rio 2016 Games portal (brasil2016.gov.br), the Rio de Janeiro State Government portal (rj.gov.br), the Ministry of Sports (esporte.gov.br), the Brazilian Olympic Committee (cob.org.br), and the primary Rio Olympics website (rio2016.com). These disruptions occurred during peak global viewership of the event, amplifying operational impacts. Subsequently, Anonymous escalated operations by exfiltrating and publishing sensitive data from several sports federation domains, including the Brazilian Confederation of Modern Pentathlon, Handball Confederation, Boxing Confederation, and Triathlon Confederation. Leaked records contained personal identifiers, financial information, user login credentials, and hashed passwords stored on these systems. The group further claimed to have compromised and released private details belonging to high-ranking officials, specifically naming the Mayor of Rio de Janeiro, the Governor of Rio de Janeiro, the Minister of Sport, the President of the Brazilian Olympic Committee, and three unnamed businessmen allegedly involved in corruption schemes.
Anonymous Brazil publicly framed these actions as protests against perceived government mismanagement and corruption surrounding the Olympics, releasing a video statement vowing to "unmask the numerous arbitrary actions" of state authorities. They actively encouraged public participation in ongoing attacks by promoting the use of Tor anonymity tools and providing instructions for conducting additional DDoS campaigns against Brazilian digital assets. While the article confirmed all targeted websites had been restored to operational status by August 6, 2016, the incident highlighted persistent vulnerabilities in Brazil's event-critical infrastructure. This followed a pattern of hacktivist activity targeting major sporting events in Brazil, notably including Anonymous Brazil's 2014 website defacements and street protests opposing FIFA World Cup policies, which had similarly combined digital disruption with anti-corruption messaging. The 2016 attacks demonstrated a tactical progression from prior operations, incorporating both immediate service disruption through DDoS and sustained reputational damage via sensitive data exposure of officials and affiliated organizations.