Incidents
São Paulo FC Website Hacked Again as Attacker Taunts Club After First Breach
By News Desk ·
Key takeaways
- São Paulo FC's official website was breached twice in two days by the same attacker, who left an ironic message after the first restoration.
- The club took the site offline again for security updates and intends to file a police report with the Civil Police.
- Palmeiras was targeted on October 26 and Corinthians on October 31, when a fake note announced the signing of Lionel Messi.
São Paulo Futebol Clube's official website was hacked for the second time in two days, with the attacker knocking the page offline and leaving a message mocking the club's earlier restoration. Estadão reported the breach on November 6, 2026.
São Paulo's Second Breach and the Attacker's Message
São Paulo Futebol Clube is one of Brazil's most successful professional football clubs, operating the MorumBIS stadium, a youth academy and a digital ecosystem that includes the SPFCPlay streaming platform, the Sócio Torcedor membership program and the Loja SAO merchandise store, according to company records.
The same intruder was behind both incidents. On Thursday, the user accessed the page and left a homophobic message; São Paulo restored the site, and it was taken down again on Friday. After the second breach, the attacker wrote: "Pensei que vocês tinham tirado meu acesso."
São Paulo removed the site from the air again to carry out security updates. The club also intends to register a police report with the Civil Police, according to ge.
Palmeiras and Corinthians Also Targeted
Before the São Paulo episodes, Palmeiras was hit by a hacker attack on October 26. The alviverde site showed instability and displayed a taunt reading "Rakiei só pra avisar que Palmeiras não tem mundial."
Five days later, on October 31, Corinthians' official portal was invaded and published a false note announcing the signing of Argentine Lionel Messi, with fictitious details about the negotiation and a statement attributed to the player. Corinthians said it neutralized the invasion and that there was no financial loss or compromise of data.
São Paulo's Recent Off-Field Business
São Paulo announced the signing of forward Victor Sá from Russian club Krasnodar in July 2026 on a contract through December 31, 2029, with training integration underway at SuperCT, according to akta.pro company records. The club also released its 2026/2027 jersey line manufactured by New Balance, priced at R$249.99 to R$399.99 with installment payment options of up to 5x, and secured Konami as a technology and integration partner for the eFootball gaming franchise.
What Comes Next for São Paulo
São Paulo has taken its site offline for security updates and plans to file a police report with the Civil Police. The club's official site remains the reference point for its online operations.