Cyber Incident Victim: Brazil Olympic Committee
Date:
Aug 2016
Location:
Brazil
Summary
The Brazil Olympic Committee was targeted in a cyberattack by Anonymous Brazil during the Rio Olympics opening ceremony. Hacktivists conducted DDoS attacks against multiple government and Olympic-related websites, causing outages, followed by data breaches exposing personal and financial information from sports confederations, including hashed passwords. They also leaked details of high-profile officials like the Mayor and Olympic Committee President, alleging corruption. The group urged further disruptions using Tor and vowed continued operations to expose perceived injustices, linking the protest to previous actions against major sporting events in Brazil.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On August 5, 2016, coinciding with the opening ceremony of the Rio de Janeiro Olympics, the hacktivist group Anonymous Brazil launched distributed denial-of-service (DDoS) attacks against multiple Brazilian government and Olympic-related websites. The primary targets included the Brazil Olympic Committee (cob.org.br), the federal government's official 2016 Games portal (brasil2016.gov.br), the Rio de Janeiro State Government portal (rj.gov.br), the Ministry of Sports (esporte.gov.br), and the Rio 2016 Olympics official website (rio2016.com). These coordinated attacks overwhelmed the sites with traffic, forcing several offline during the high-profile event. The disruption occurred as global attention focused on the Games' inauguration, amplifying the operational impact on digital services supporting the Olympics infrastructure.
In a secondary phase of operations, Anonymous exfiltrated and leaked sensitive data from several Brazilian sports organizations, including the Brazilian Confederation of Modern Pentathlon (pentatlo.org.br), Brazilian Handball Confederation (brasilhandebol.com.br), Brazilian Confederation of Boxing (cbboxe.com.br), and Brazilian Triathlon Confederation (cbtri.org.br). The leaked data comprised CSV files containing personal information, financial records, login credentials, and hashed passwords of registered users. The group additionally claimed to have published personal details of high-profile individuals, including Rio de Janeiro's Mayor, the State Governor, the Minister of Sport, the President of the Brazilian Olympic Committee, and three unnamed businessmen allegedly involved in corruption. Anonymous publicly urged supporters to employ Tor anonymity tools and participate in further DDoS campaigns against Brazilian targets, framing the attacks as a protest against systemic corruption and misplaced government priorities during the Olympics. By the time media reported the incident on August 6, all affected websites had been restored to operational status, though the group vowed to continue operations targeting what they described as "state enemies" of the population. This incident mirrored Anonymous Brazil's prior activism during the 2014 FIFA World Cup, when they defaced official websites and protested mask bans, demonstrating a recurring pattern of leveraging major sporting events to amplify dissent against perceived institutional failures.