Cyber Incident Victim: Romanian Football Federation
Date:
Jun 2016
Location:
Romania
Summary
The Romanian Football Federation's website was defaced by an Albanian hacker using the alias nofawkX-al, who replaced its content with a nationalist message and the Albanian double-headed eagle emblem. The attack occurred shortly after Albania's historic football victory over Romania in an international tournament, which eliminated the organization from competition. The hacker also targeted the Romanian Football Cup site before IT staff restored both platforms within hours. Romanian police launched an investigation into unauthorized system access and data integrity violations, treating the incident as a cybercrime. The defacement amplified tensions stemming from the sports defeat, coinciding with celebrations in Albania over the team's milestone achievement.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On June 21, 2016, two days after Albania defeated Romania 1-0 in the UEFA EURO 2016 football championship, Albanian hackers defaced the official website of the Romanian Football Federation (FRF). The attacker using the alias "nofawkX-al" compromised the site during Tuesday afternoon, replacing its content with a stylized Albanian double-headed eagle emblem and a message stating: "Red And Black I Dress. Eagle On My Chest. Keep My Head Up For The Flag I Die. It's Good To Be Albanian." FRF's IT personnel detected the breach and fully restored the website within hours. Romanian police acknowledged the incident through an official statement confirming that the Directorate for Combating Organized Crime (DCCO) would investigate under charges of unauthorized computer system access and alteration of data integrity. The cyberattack compounded Romania's humiliation following their tournament elimination, as the loss to Albania marked Romania's exit from EURO 2016.
The defacement occurred against the backdrop of Albania's first-ever victory in a UEFA European Championship or FIFA World Cup match, which triggered nationwide celebrations across Albanian cities. Authorities announced plans to award diplomatic passports to the team and distribute €1 million in prize money. The same hacker subsequently defaced the website of the Romanian Football Cup, though restoration timelines for this secondary attack were unspecified. No technical details regarding attack vectors, data exfiltration, or prolonged service disruptions were disclosed by FRF or law enforcement. The incident underscored the intersection of geopolitical sports rivalries and cyber operations, with the defacements serving as symbolic retaliation for Romania's on-field defeat while amplifying Albania's celebratory momentum.