Cyber Incident Victim: Brazilian Triathlon Confederation
Date:
Aug 2016
Location:
Brazil
Summary
Anonymous Brazil launched cyber attacks against Brazilian government and Olympic-related websites during the Rio Olympics opening ceremony, protesting the event. The group executed DDoS attacks causing downtime for multiple official domains, including the Brazilian Triathlon Confederation's site. Subsequently, they leaked personal, financial, and login credentials—including hashed passwords—from several sports organizations' databases, compromising user data. The confederation's records were among those exfiltrated in coordinated CSV file dumps. Additionally, Anonymous claimed to expose sensitive information of high-profile officials and businessmen allegedly involved in corruption. The hacktivists encouraged further disruption through Tor-based DDoS campaigns, continuing their pattern of targeting major sporting events to oppose perceived government misconduct.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 2 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On August 5, 2016, coinciding with the Rio de Janeiro Olympic Games opening ceremony, the Anonymous Brazil hacktivist collective launched distributed denial-of-service (DDoS) attacks against multiple Brazilian government and sports organization websites. The initial wave disrupted access to high-profile domains including the federal government's official Olympics portal (brasil2016.gov.br), the Rio de Janeiro State Government portal (rj.gov.br), the Ministry of Sports (esporte.gov.br), the Brazilian Olympic Committee (cob.org.br), and the Rio 2016 Olympics official site (rio2016.com). These attacks forced several targeted sites offline during peak visibility of the international event. Anonymous Brazil publicly claimed responsibility, framing the operation as a protest against perceived government corruption and misuse of public funds related to the Games. The timing deliberately exploited global attention on the Olympics to amplify their message criticizing state authorities.
In a secondary phase of the operation, Anonymous exfiltrated and leaked sensitive data from several sports federation websites, including the Brazilian Triathlon Confederation (cbtri.org.br). The compromised data from cbtri.org.br and other domains—such as the Brazilian Modern Pentathlon Confederation (pentatlo.org.br) and Brazilian Handball Confederation (brasilhandebol.com.br)—included registrants' personal information, financial records, login credentials, and hashed passwords stored in CSV files. The collective additionally claimed to have leaked personal details of high-profile individuals including Rio's Mayor, the State Governor, the Sports Minister, and the Brazilian Olympic Committee President. By the time media reported the incident on August 6, all affected websites had been restored to operational status. Anonymous Brazil encouraged further disruptive actions through social channels, urging supporters to employ Tor anonymity tools for additional DDoS campaigns. This incident followed their 2014 protests against FIFA World Cup policies in Brazil, demonstrating sustained hacktivist opposition to major sporting events hosted by the country.