Exclusive: How the FBI investigates the hacktivities of Anonymous
On September 19, 2008, hackers from the Anonymous collective attacked the website of Fox News host Bill O'Reilly. The hackers found and immediately posted e-mail addresses, passwords, and physical addresses …
Context & Ripple Effects
By August 2011 Anonymous has spent the year escalating from spectacle to targets that fight back: Gawker's March look inside the collective's 'war room' showed its internal coordination, and a July message dared the FBI with 'there is nothing you can do to stop us'. Two weeks before this piece, hackers hit roughly 70 mostly rural US law enforcement websites and stole data — including, per a local police chief, information about an ongoing investigation.
The Ars Technica report reframes the conflict as a slow-motion legal one rather than a web-vandalism spat: it traces FBI investigative practice back to the September 2008 attack on Bill O'Reilly's Fox News site, where e-mail addresses, passwords, and physical addresses were dumped. That framing matters because it shows the bureau working a multi-year evidence trail against a leaderless collective whose members had just been spotted at Defcon and who claimed the Syrian Ministry of Defense defacement days earlier.
First-order effects
- Anonymous members identified through their own 2008 O'Reilly data dump face exposure years after the fact, since posted credentials and addresses give investigators durable leads.
- Local law enforcement is now a direct target: the mid-August breach of about 70 rural police sites compromised an active investigation, per a police chief cited in prior reporting.
Second-order effects
- The collective's July taunt that the FBI could do nothing collides with its own operational reality — each dox and site defacement hands prosecutors more attributable material, forcing Anonymous to weigh visibility against self-incrimination.
- Agencies and government-affiliated sites must harden against retaliation tied to arrests or investigations, as the BART cell-shutdown commute-hour protest announced on August 14 shows hacktivist response times shrinking to days.
Third-order effects
- If the pattern holds, hacktivism becomes a long-tail criminal-justice problem: decentralized groups generate distributed, years-later prosecutions built from the victims' own leaked data, shifting the battleground from servers to courtrooms.
The trend: Hacktivist operations are increasingly answered by methodical, multi-year federal investigations rather than by the immediate takedowns the groups themselves predict.