# São Paulo FC Website Hacked Twice in Two Days

The club faces repeated cyberattacks as hackers mock security measures with ironic messages.

- **Source:** [GE Globo – Futebol](https://ge.globo.com/futebol)
- **Published:** 2026-11-06
- **Topic:** [technology](https://brifing.si/c/technology)
- **Original article:** <https://ge.globo.com/futebol/times/sao-paulo/noticia/2026/11/06/hacker-invade-site-do-sao-paulo-de-novo-e-publica-mensagem-ironica-clube-vai-registrar-bo.ghtml>
- **On Brifing:** https://brifing.si/s/85139516-f089-4f80-8219-8b54f98fea7a

## Repeated Unauthorized Access

The official website of São Paulo FC suffered a second security breach within forty-eight hours this Friday. The intruder, who previously posted homophobic content on Thursday, bypassed security protocols again. The attacker left a mocking message on the landing page, specifically taunting the club for failing to revoke their unauthorized system access.

## Club Response Strategy

Following the second incident, São Paulo FC administrators immediately took the website offline to prevent further damage. The organization confirmed it will file a formal police report with the Civil Police. This legal action aims to identify the perpetrator and address the ongoing vulnerability that allowed these repeated unauthorized entries to occur.

## Pattern of Regional Attacks

This incident is part of a broader wave of cyberattacks targeting major football clubs in São Paulo. These digital intrusions appear to be coordinated or inspired by similar recent events. The frequency of these attacks suggests a systemic weakness in the digital infrastructure maintained by prominent sports organizations across the state region.

## Corinthians Incident Context

In late October, the Corinthians website was the first to be compromised in this series of attacks. The hackers utilized the platform to publish a fake announcement regarding the signing of Lionel Messi. This event signaled the start of a trend where club websites are being exploited for public trolling and misinformation.

## Palmeiras Security Breach

Shortly after the Corinthians incident, the Palmeiras website was also successfully breached by hackers. The attackers used the club's official domain to display provocative messages mocking the team's history, specifically referencing their lack of a world title. These attacks demonstrate a clear intent to humiliate clubs through their own digital channels.

## Digital Vulnerability Risks

The recurring nature of these breaches highlights significant gaps in the cybersecurity frameworks of professional sports clubs. When websites are compromised, they become vehicles for hate speech, misinformation, or reputational damage. Clubs must now prioritize hardening their web infrastructure to protect their brand integrity and prevent further exploitation by malicious external actors.

## Investigation and Legal Path

The Civil Police investigation will likely focus on tracing the digital footprints left by the attackers during these multiple intrusions. Filing a Boletim de Ocorrência is the necessary first step for law enforcement to initiate a formal inquiry. Authorities will examine server logs to determine how the hackers gained repeated administrative access.

## Future Security Outlook

As clubs like São Paulo FC recover, the focus shifts toward long-term digital resilience. Beyond immediate repairs, organizations must implement multi-factor authentication and rigorous penetration testing to mitigate future risks. The ongoing trend of these attacks serves as a stark reminder that sports entities are increasingly vulnerable targets in the digital landscape.

## Sources covering this story

- https://ge.globo.com/futebol/times/sao-paulo/noticia/2026/11/06/hacker-invade-site-do-sao-paulo-de-novo-e-publica-mensagem-ironica-clube-vai-registrar-bo.ghtml — 

---

_Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._
