Cyber Incident Victim: Bilderberg Group
Date:
Jun 2016
Location:
United Kingdom
Summary
The Anonymous hacking collective escalated cyberattacks against financial institutions and stock exchanges as part of Operation Icarus, rebranded as Project Mayhem. Using distributed denial-of-service (DDoS) techniques, the group disrupted multiple targets including the London Stock Exchange and the official website of the Bilderberg Group, causing temporary outages. The attack on the secretive conference's site was motivated by accusations of suppressing media freedom and controlling public perception. Additional impacted entities included stock exchanges in Romania, Athens, Turkey, Panama, and the Philippines, alongside central banks such as those of England, France, and Sweden. While Anonymous claimed 67 banking targets, the primary impact was limited to website disruptions without significant operational losses.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
In early June 2016, the Anonymous hacking collective escalated its Operation Icarus campaign by transitioning into a new phase branded as "Project Mayhem," inspired by the film Fight Club. This phase targeted global financial institutions and stock exchanges through distributed denial-of-service (DDoS) attacks designed to overwhelm servers with traffic. The campaign began with a successful two-hour disruption of the London Stock Exchange (LSE) on June 2, though the LSE declined to comment on the incident and the City of London Police stated they received no formal reports about the attack. On June 4, Anonymous released a YouTube video calling for broader cyber participation and published a list of global stock exchange targets. Subsequent attacks between June 1 and June 9 affected the Philippines Stock Exchange, Turkey Stock Exchange, Panama Stock Exchange, and NYSE Euronext Market. The operation expanded beyond stock exchanges to include central banks such as the Bank of Scotland, Bank of France, Bank of England, and Sweden’s central bank, though impacts were limited to temporary website disruptions without significant operational or financial damage.

The most prominent attack occurred on June 9 when Anonymous disabled the official website of the Bilderberg Group during its annual conference in Dresden, Germany, which hosted 126 attendees including IMF Managing Director Christine Lagarde and former MI6 head Sir John Sawers. The group justified this attack by accusing the Bilderberg Group of suppressing media coverage and manipulating public perception through elite control of information. Concurrently on June 9, Anonymous targeted the Romanian Stock Exchange and Athens Stock Exchange Group, maintaining the campaign’s momentum. By this stage, Anonymous claimed 67 successful DDoS attacks against banking and financial targets globally. No evidence suggested data breaches or financial theft beyond temporary website inaccessibility. The affected organizations largely avoided public statements, with only the LSE and City of London Police providing limited acknowledgments. The operation demonstrated a coordinated but superficial disruption strategy focused on symbolic targets rather than penetrating critical financial infrastructure.
