Cyber Incident Victim: OpCatalunya
Date:
Oct 2017
Location:
Spain
Summary
Anonymous launched a DDoS attack targeting the Constitutional Court's website, causing extended disruptions to its online services, email, and other internet functionalities. The hacktivist group simultaneously attacked multiple entities including political parties, financial institutions, and technology providers under the #OpCatalunya campaign, which had been publicly announced via social media and preceded by warnings from national security authorities. These actions formed part of a broader series of cyber operations advocating for Catalan independence, with prior incidents compromising Spanish government and police databases. Most affected services were restored within hours, though the Constitutional Court's systems remained inaccessible for an extended period.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On October 21, 2017, hacktivist group Anonymous launched distributed denial-of-service (DDoS) attacks against multiple Spanish entities, primarily targeting the Constitutional Court (Tribunal Constitucional). The assault began around 2:00 AM local time, rendering the court's website, email systems, and other internet services inaccessible. By 6:30 PM that evening, the Constitutional Court's digital infrastructure remained offline while most other affected organizations—including the Popular Party (PP), Francisco Franco Foundation, Banca March, and technology providers Flexinet and Telitec—had restored normal operations. The attacks coincided with a 24-hour campaign announced under the hashtags #OpCatalunya and #FreeCatalunya, which Anonymous affiliates promoted through the Twitter account NamaTikure. Spain's Department of National Security had issued a public warning about the impending cyberattacks the previous day (October 20), noting that similar operations under the same banners had occurred throughout preceding weeks.
The incident formed part of Anonymous' broader "Operation Catalonia" initiative, which began with a manifesto video released on September 24, 2017. Prior attacks under this campaign included database breaches targeting Spain's National Police and government systems. During the October 21 DDoS campaign, attackers overwhelmed target servers with traffic to disrupt public access, though no data theft or permanent system damage was reported in the immediate aftermath. The Department of National Security's preemptive alert indicated Spanish authorities had monitored hacktivist communications but did not prevent the disruptions. Restoration timelines varied across targets, with the Constitutional Court experiencing prolonged downtime exceeding 16 hours while other entities recovered within the day. No organization claimed complete mitigation of attack vectors during the active campaign window.