US Bureau of Justice Statistics Hack

In March 2012, Anonymous gained unauthorized access to the US Bureau of Justice Statistics (BJS) website, a federal agency under the Department of Justice. The attackers exfiltrated 1.7GB of data, including internal email communications and a complete database dump. The breach was not immediately discovered; it came to light when Anonymous publicly claimed responsibility on May 23, 2012, during a Politico interview. The leaked data included internal correspondence between BJS officials and other law enforcement agencies. Anonymous stated the hack was motivated by opposition to government surveillance programs and the prosecution of whistleblowers. The compromised data exposed internal debates about crime statistics methodology and inter-agency communications.

The Bureau of Justice Statistics is the primary federal agency responsible for collecting, analyzing, and publishing data on crime, criminal offenders, victims of crime, and the operation of justice systems. As a DOJ component, it had access to sensitive inter-agency communications.

The specific attack vector was not publicly detailed, but the breach involved gaining access to the BJS web server and extracting a database backup along with email archives. The 1.7GB volume suggests a comprehensive data extraction.

MITRE ATT&CK techniques

• T1505

Anonymous is a decentralized hacktivist collective. The BJS hack was part of a broader 2012 campaign targeting US government institutions, demonstrating the group's sustained focus on federal digital infrastructure.

Aliases

• Anonymous Collective

MITRE groups

• T1190

Attribution sources

• Anonymous Self-Claim
• Politico
• Media Reports

Countries affected

• United States

Data types

• Internal Emails
• Database Records
• Inter-Agency Communications
• Crime Statistics Data

Notable documents

• BJS Internal Emails
• BJS Database Dump

Operational disruption and reputational damage to the DOJ.

Public reaction

The hack highlighted ongoing concerns about federal cybersecurity. It came at a time of heightened scrutiny of government digital defenses following several high-profile breaches.

Political impact

The incident added to the pressure on federal agencies to improve cybersecurity under the Federal Information Security Management Act (FISMA).

No arrests were reported. The DOJ investigated the breach internally.

Policy changes

• Increased emphasis on web application security for federal statistical agencies.

Security improvements

• Enhanced monitoring of federal government websites for unauthorized access.

Significance

The BJS hack demonstrated that even internal components of the US Department of Justice were vulnerable to Anonymous attacks, following the similar Operation Megaupload retaliation against the DOJ in January 2012.

Legacy

The incident contributed to the broader narrative of Anonymous's 2012 campaign against US government institutions, showcasing persistent vulnerabilities in federal web infrastructure.

Media partners

• Politico

Publishing organisations

• Anonymous

Related events

• Operation Megaupload (2012)

BJS secured its website and investigated the breach. Impact was limited by the 2-month delay in discovery.

References

1. [1]Politico Article (May 23, 2012)
2. [2]Media reports (ZDNet, The Register)