According to U.S. and British authorities, operatives from Russia's military intelligence wing unleashed a barrage of cyberattacks on the 2018 Winter Olympics and started operations against the Tokyo Games as part of a broader worldwide hacking campaign that also included attacks on a French presidential election and Ukraine's electricity grid.
Russia denied the allegations, as it did when details of its doping program first emerged and after attacks on other sporting bodies, including the global doping regulator.
A Kremlin spokesman, Dmitry Peskov, on Tuesday described the accusations as "Russophobia."
"Russia has never carried out any hacking activities against the Olympics," he told reporters in Moscow.
The accusations come as Russia tries to overturn the four-year ban from major international sporting events it received in December when experts at the world's anti-doping regulator found that Russian officials manipulated key data that would have allowed sports federations to finally identify the hundreds of athletes it helped to cheat.
For the IOC and its president, Thomas Bach, the latest details of Russian malfeasance are likely to be a bitter blow. For years, the Olympic movement has stopped well short of punishing Russia with the most severe penalties, which would include barring any Russian athletes from appearing at the Olympics or participating in regional events.
On Monday, the IOC was cautious in its first comments about the affair. Its statement did not mention Russia by name or specifically respond to the allegations.
"The IOC and the Organizing Committees of the Olympic Games have identified cybersecurity as a priority area and invest a lot to offer the Olympic Games the best cybersecurity environment possible," the statement said. "Given the nature of the topic, we do not divulge those measures."
In South Korea, the IOC angered much of the global anti-doping movement by allowing Russian athletes to participate even though its national Olympic committee, flag and national anthem were banned. A total of 168 Russian athletes competed under the designation "Olympic Athlete From Russia."
Russia faced another ban in Tokyo, this time more severe than the one it received before the Pyeongchang Games. Russian athletes will have to prove they are clean from banned substances and do not have links to any of the manipulated data from a discredited Moscow laboratory. And in Tokyo they will not be able to be a part of a team in the way they were in South Korea.
Travis Tygart, who heads the U.S. Anti-Doping Agency, another group that Russia tried to hack, said he was not surprised in the slightest by the latest developments.
He said Russia's behavior "hasn't changed one bit," and the absence of meaningful punishment, in his view, has only emboldened Russia.
"The powers that be don't have the courage to stand up to Russia even when they damage and maybe permanently damage the Olympic brand and the Olympic values," Tygart said. "If a toddler keeps getting what it asks for and keeps disobeying the rules, why would they act differently?"
For German fencer Max Hartung, who set up a German athletes' representation group after the IOC's handling of the Russian doping scandal, the new accusations show how precarious even the biggest events can be.
"If a big nation state wants to sabotage sports events there's probably no means by which a sport event can defend itself from such a nation," he said.
Russia's efforts to disrupt the 2018 Winter Olympics started several months before the event and gathered pace as the IOC in 2017 considered barring Russia from the Games for its doping activities. Once the ban was confirmed, operatives from a unit of the Russian intelligence agency Main Directorate, usually referred to as the GRU, dug in, U.S. prosecutors said.
The role of the spy agency described in the scheme bears some hallmarks to how the doping program operated, when officers from a separate organization, the Federal Security Bureau, the main successor agency to the KGB, took part in clandestine, middle-of-the-night operations to replace drug-tainted urine samples with clean ones at the Sochi Olympics.
In the Olympics hack, GRU operatives sent emails to members of the IOC, athletes and other companies posing as Olympic or South Korean government officials to trick the recipients into giving them access to key Olympic infrastructure. At one point, they hacked a company that provided timekeeping services to the Olympics, according to court papers.
With their trap set, Russian officers sent event organizers into a frenzy by targeting the opening ceremony of the Games, taking down internet access, disrupting signals, grounding broadcasters' drones and taking down the official website, which prevented spectators from printing tickets required to attend the Games.
South Korea, which had spent billions of dollars to prepare for the Games, had to take drastic action as the cyberattack threatened to overwhelm the meticulously planned opening ceremony that was supposed to feature a deployment of drones. In the end, they were visible only on television, with organizers forced to use prerecorded video of the drones for telecasts.
At the time, South Korean officials and the IOC struggled to determine what had happened. The Russian officials, according to the U.S. indictment, tried to cover their tracks by taking steps to lay the blame on perpetrators in North Korea, which had made threats to the Games before agreeing to send some of its athletes to participate in a unified Korean team.
With their mission accomplished, the group involved in the successful cyberattack turned its attention to Tokyo, using the same techniques, which included months of reconnaissance work to learn about the individuals and organizations involved in putting together the complex event.
A division of Britain's intelligence agency GCHQ said it had detected the Russian intelligence agency's main cyberwarfare center, known as Sandworm and Voodoo Bear, trying a campaign closely matching the one two years earlier.
British authorities, according to people familiar with the investigation, coordinated their investigation with counterparts in the FBI, and once they had confirmed with certainty that individuals affiliated to the GRU's 74455 unit were carrying out reconnaissance work to disrupt the Tokyo Olympics, they contacted Japanese officials to warn them of the threat.
Britain's foreign secretary, Dominic Raab, condemned the attacks as "cynical and reckless."
Japan's chief cabinet secretary, Katsunobu Kato, said Japan would mount efforts to protect the Games.
"We cannot turn a blind eye to malicious cyberattacks that threaten democracy," Kato told a news conference.
He added that Japan was in contact with authorities in the United States and Britain.
Russia's arbitration hearing against its sports ban — which also includes a prohibition against hosting major sports events — is scheduled to begin in Lausanne, Switzerland, on Nov. 2, after being delayed because of the coronavirus pandemic.
Russia said it disputed the ban "in its entirety," and Dmitry Medvedev, its prime minister at the time, described the sanctions as part of "chronic anti-Russian hysteria." Its defense has been undermined by the former head of its anti-doping agency, Yuri Ganus, who described the punishment as just and said Russia had manipulated athletes' records to disguise evidence of doping.
Athletes who can prove they are untainted by the doping scandal will be able to compete at international events, including the Olympics, under a neutral flag.
Written by: Tariq Panja
Photographs by: Doug Mills
© 2020 THE NEW YORK TIMES