Cyber Incident Victim: Apulia
Date:
Feb 2016
Location:
Italy
Summary
Anonymous Italy conducted disruptive cyber operations against government portals in the Apulia region, employing DDoS attacks to mask an intrusion that led to website defacement, while also targeting neighboring Basilicata with DDoS. The attacks temporarily disrupted services, prompting administrators to take systems offline for remediation. The group claimed motivation centered on opposition to the Trans Adriatic Pipeline project, citing environmental risks and threats to historical landmarks within the region.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On February 20-21, 2016, the Italian branch of the Anonymous hacker collective executed cyberattacks against government portals in Italy's Apulia and Basilicata regions. The attacks began with distributed denial-of-service (DDoS) assaults targeting the Apulia regional government's website, overwhelming its infrastructure and causing service disruption. During this DDoS activity, attackers exploited the chaos to gain unauthorized access to the Apulia portal's backend systems. They deployed a defacement message on the compromised site before IT administrators detected the intrusion. Upon discovering the breach, administrators took the portal offline entirely to contain the damage and initiate remediation. Simultaneously, Anonymous launched a separate DDoS attack against the neighboring Basilicata region's government portal, though this incident did not involve system infiltration. The Basilicata portal experienced temporary downtime but resumed normal operations after the DDoS subsided.
The attacks directly impacted government digital services in both regions, with Apulia suffering prolonged disruption due to the combined DDoS and defacement incident. Anonymous Italy publicly claimed responsibility through tweets and blog posts, explicitly linking the operations to opposition against the Trans Adriatic Pipeline (TAP) project. The TAP initiative, which began construction in 2015, aimed to transport natural gas from Azerbaijan through Southern Europe, including Apulia. Critics argued the pipeline threatened local ecosystems and endangered UNESCO-protected cultural heritage sites in the region. Anonymous framed their hacktivism as a protest against governmental support for the pipeline's environmental and cultural impacts. The defacement message left on Apulia's portal served as their primary communication channel for these grievances before its removal. No data theft or permanent system damage was reported, though the incidents highlighted vulnerabilities in regional government infrastructure facing coordinated hacktivist campaigns.