Everyone and no one
Anonymous came out of imageboard culture in the early 2000s, where posting without a name was the default and the joke was that the crowd was a single person. The joke became an identity: a mask from a film about an anarchist, a slogan borrowed from scripture - We are Legion - and a rule that anyone claiming the name is .
That structure is the whole subject. There is no membership, no leadership and no mechanism for saying that action was not us, which makes the collective impossible to disband and equally impossible to hold to account. Both properties come from the same design.
From pranks to protest
The turn came in 2008 with Project Chanology, a campaign against the Church of Scientology that began as harassment and grew into coordinated street protests in dozens of cities - masked people standing outside buildings with signs, which is not what anyone expected from an imageboard.
Operation Payback followed in 2010: when payment processors cut off donations to WikiLeaks, Anonymous knocked their sites offline with distributed denial of service, using a point-and-click tool that thousands of volunteers ran on their own machines. The tool did not anonymise anything, and dozens of participants were later identified by their own network addresses - the movement's first hard lesson that political intent is not operational security.
Then the range widened: support for protesters in Tunisia and Egypt during the Arab Spring, campaigns against police departments after high-profile deaths, and mass reporting of extremist accounts. Alongside those sit the failures - misidentified individuals doxxed as suspects, harassment carried out under the banner by people the rest could not repudiate. Any honest account holds both, because the structure that produced one produced the other.
LulzSec: fifty days
In 2011 six people split off as LulzSec and ran a spree that is still studied. Sony, PBS, games companies, an FBI affiliate, the CIA's public website - each announced on Twitter with a cartoon mascot, each mocking the victim's security.
Two things about it are uncomfortable in different ways.
The technique was mundane. Most of it was ordinary against neglected web applications and reused credentials. The systems really were that easy, and the crew's contempt was, technically speaking, earned.
The ending was engineered. The leader, known as Sabu, had been arrested early and ran the crew for months as an FBI informant, with agents watching the channel where operations were planned. The arrests arrived together because they had always been available. is the standard case study in how a movement with no vetting and no accountability structure gets rolled up through a single person - and in what happens to the people who trusted that person.
What the decade established
Denial of service is a political act with legal consequences. Participants framed it as a digital sit-in; courts framed it as unauthorised interference with computers, and sentences followed under statutes written decades earlier. The metaphor never survived contact with the law.
Publication is the payload. The old model stole data for money. WikiLeaks, Anonymous and later state operations like the DNC hack established the newer one: take the material, then release it selectively into a news cycle. That shift - from theft to influence - is the single most consequential change in what an intrusion is for, and it runs directly back to the WANK worm's discovery that the message could be the point.
Anonymity is harder than it looks. The people identified were caught through reused handles, forum posts from years earlier, a single unproxied connection, or a friend who talked. Operational security fails at the human seam, every time.
A movement with no structure cannot expel anyone. No membership means no way to say not us, which is why every disgraceful action taken under the mask attaches to everything else done under it. The costs of leaderlessness are not theoretical; they are the reason the name means less now than it did in 2011.
Where it went
The mask persists as a symbol and resurfaces periodically around new causes. The energy largely dispersed: some into legitimate security careers, some into the leak-platform and press-freedom world, some into prison. What remains is a permanent question the field has not settled and probably cannot - the same one the Chaos Computer Club answered with restitution and a press conference, and the same one the hacker underground has argued since the 1980s.
When the cause is right, does the technique become legitimate? The honest answer this history supports is that identical techniques are protest or crime depending on who is judging, that the collateral damage of a symbolic action lands on people with no part in the argument, and that the movements which lasted were the ones that gave the money back and showed their work.