Corinthians website hacked: the Messi 2027 signing is fake
Hackers posted a fake Messi signing on Corinthians' official site, days after Palmeiras was defaced. What we know, what defacement is and how fans stay safe.
Fake. Lionel Messi has not signed for Brazilian club Corinthians. The “official note” announcing him as a 2027 signing appeared on the club's website in the early hours of Saturday, October 31, 2026, and was posted by intruders, according to Gazeta Esportiva. The fake page even invented how the deal would be financed and put made-up quotes in Messi's mouth, per Diário 360.
What did Corinthians say?
The club removed the post and took its site and the Neo Química Arena site offline as a precaution. It said its IT team neutralized the attack, found no financial loss or data compromise and is strengthening security. The attackers have not been identified.
Was Palmeiras hacked too?
Yes. On October 26, rival Palmeiras' institutional site displayed the taunt “Palmeiras não tem Mundial” (“Palmeiras has no Club World Cup”). The breach hit the main site, not ticketing, and the attacker left technical notes about the system, according to Bahia Notícias. There is no public evidence the two cases share an author.
What is website defacement?
Defacement means someone gains access to a site's admin panel or server and changes what visitors see. It usually exploits outdated content-management plugins, weak or reused admin passwords and accounts without two-factor authentication. Not every defacement involves data theft, but it proves unauthorized access, so investigators must check whether the intruder went further.
How fans can stay safe
- Ignore links to “Messi presale tickets”, jerseys or giveaways riding on the fake news.
- Type the club's address yourself or use the official app — see how to check if a site is legit.
- Change your fan-club password if you reuse it elsewhere, and turn on two-step verification (why MFA matters).
- Distrust emails or texts citing the attack and asking you to “update your details”.
More incidents on the radar.
来源
- Gazeta Esportiva — Site do Corinthians é hackeado e tem falso anúncio de Messi publicado (31/10/2026)
- Diário 360 — Após invasão ao Palmeiras, site oficial do Corinthians também é alvo de hackers (31/10/2026)
- Bahia Notícias — Site do Palmeiras é hackeado e exibe mensagem provocativa sobre Mundial (26/10/2026)