AFP logo at EBB Canberra

News Centre

Our latest media releases, podcasts and stories
Media Release

AFP Operation Peppermint catches Santa hacker 

Editor’s note: The AFP’s Operation Peppermint video available via Hightail 

The AFP has today released a video showing how the law enforcement agency saved Christmas after the Grinch allegedly stole Santa’s Naughty and Nice List in a major cyber-attack. 

This serves as a timely reminder to all Australians to be cyber safe this festive season, as the AFP takes the public behind the scenes to show how Operation Peppermint unfolded.  

The AFP’s Cyber Command launched the investigation, following a report from Santa that the Naughty and Nice list had been hacked, providing investigators with a threatening video of the Grinch showing him boasting about the alleged offending.  

The video was subjected to forensic analysis and quickly identified an alleged offender who was described as having a furry, green face, slim build, pointy nose, dark eyes, a grinch-like demeanor, and wearing a red suit.  

Utilising the full force of the AFP’s investigative resources, including intelligence, surveillance, and tactical response, the alleged offender was swiftly identified as the Grinch. 

He was subsequently located and apprehended on Monday 23 December, 2024, with the Naughty and Nice List returned to Santa just in time for Christmas.  

AFP Assistant Commissioner Richard Chin said this incident showed how even Santa could be the victim of cybercrime.  

“It is extremely important to know how to protect yourself and your loved ones online,” Assistant Commissioner Chin said. 

"We live in a digital world where people can access online content 24 hours a day across multiple digital devices such as mobile phones, tablets, laptops, and computers.  

“Scams are becoming harder to identify as cybercriminals refine their tactics, however the AFP remains one step ahead.  

“I urge all Australians to take time to consider what information about yourself you post online, and who may be contacting you seeking your personal information. If something looks suspicious, or seems too good to be true, it may very well be a scam.  

“One of the best tools we have for fighting cybercriminals is you - we need all community members to understand different types of cybercrime and the simple steps you can take to avoid becoming a victim.” 

The AFP wishes everyone a Merry Christmas and a happy and prosperous 2025.  

Connect with us

Follow our social media channels to learn more about what the AFP does to keep Australia safe

AFP Media

Journalists can contact us Monday to Friday from 6.30 am to 6 pm Canberra time. Outside those hours, a rostered officer is on call.

Cybercrime and cybersecurity

Report concerns about cybercrime or cybersecurity incidents

Local Policing

In an emergency, call 000.

If there is no immediate danger or you want to report non-urgent crime, contact the 24-hour Police Assistance Line.