Information space

Disinformation campaigns, information control, major leaks, and narrative warfare Filter with GET /api/v2/events?family=cameoplus&cameoplus_domain=INFORMATION, or on a specific subcategory code below. Every code in this domain starts IF. Goldstein does not apply to this domain — see the domain index. How the metrics read in this domain. magnitude is an impact tier for reach and coordination; market_sensitivity is usually low because most information events touch no traded claim directly

​

IF01

DISINFORMATION OR INFLUENCE OPERATION A confirmed coordinated information manipulation campaign: state-attributed or confirmed coordinated inauthentic behavior (platform takedowns of coordinated networks), confirmed foreign election interference operation, official government attribution of disinformation campaign to state actor, major coordinated fake news network dismantled by platforms (meta or Twitter/X removing coordinated state-linked accounts), social media manipulation campaign affecting a major election or referendum confirmed by intelligence/official investigation. Confirmation standard: at least ONE of: (a) official government attribution, (b) platform disclosure of coordinated account removal, (c) confirmed monitoring organization data (IODA, NetBlocks, Stanford Internet Observatory, EU DisinfoLab), or (d) credible investigative reporting with corroborating evidence from ≥2 independent outlets. Also covers

• coordinated disinfo campaign
• election interference
• foreign influence op
• Also includes cyber-enabled influence operations: hack-and-leak operations (digital intrusion followed by selective publication to shape narrative), deepfake campaigns targeting political figures or electorates at scale, AI-generated propaganda networks (LLM-produced content farms attributed to state actors).

Does not cover

• IF01 vs. IF04: IF01 covers the infrastructure and actors of the operation (account networks, foreign state attribution). IF04 covers the narrative content and propaganda campaign. They can both apply to the same event if infrastructure AND narrative dimensions are both newsworthy.

​

IF02

INFORMATION CONTROL ACTION A government or state-affiliated entity takes a concrete action to suppress or control information flow: confirmed internet shutdown (national or regional, verified by IODA/NetBlocks), social media platform ban or blocking (government-ordered), major media outlet closure or license revocation, mass journalist arrest campaign clearly linked to information control, censorship directive affecting major media, state-ordered content removal from platforms at national scale. The action must be CONFIRMED as having occurred (not just announced). Internet shutdowns verified by monitoring organizations qualify immediately. Also covers

• internet shutdown
• platform ban
• censorship action
• media suppression
• journalist arrest
• Also includes subtler but confirmed control mechanisms: confirmed DNS blocking of major information sources, state-mandated keyword censorship on major platforms (confirmed leaked directives or technical verification), confirmed state algorithmic manipulation of search/social results for political ends, confirmed platform throttling reducing speeds to force behavior change. These require the same confirmation standard.

Does not cover

• IF02 INTERNET SHUTDOWNS: use confirmed outage data from NetBlocks or IODA. “Government announces it will restrict social media” is not yet IF02. “NetBlocks confirms 48-hour internet shutdown” is IF02.

​

IF03

MAJOR LEAK OR DISCLOSURE A significant unauthorized disclosure of classified, sensitive, or confidential information: government classified document leak with national security implications (WikiLeaks-level, Snowden-level), major corporate data breach exposing sensitive government or critical infrastructure data, whistleblower disclosure of confirmed illegal government activity, financial leak revealing systemic wrongdoing (Panama Papers-level), intelligence disclosure affecting military operations. Scale: should involve classified or sensitive material from a government, major institution, or system of national significance. Also covers

• data breach
• document leak
• whistleblower disclosure
• classified info release

Does not cover

• Individual privacy breaches without strategic importance → SKIP.
• IF03 LEAKS: code when the leak becomes public or the disclosure is confirmed, not when it is later analyzed. Distinguish leaks (unauthorized disclosure) from whistleblower official channels; both may qualify if the information is of national significance.
• CYBER vs. INFORMATION: a cyber breach that exfiltrates data without disclosing it → TE03. A breach that results in public disclosure of sensitive material → both TE03 (for the breach) and IF03 (for the disclosure). Pick the domain that matches the article’s primary framing.

​

IF04

NARRATIVE WARFARE EVENT A large-scale, coordinated attempt to shape the information environment through mass propaganda, false flag claims, or information manipulation: state-level false flag accusation with supporting evidence and strategic timing, confirmed large-scale propaganda campaign (state media coordinated messaging effort), coordinated hashtag or narrative campaign traced to state actors, major media operation revealed as front for state propaganda, wartime information operation targeting civilian populations. Distinguished from IF01 (foreign influence operations) by focusing on the narrative/content dimension rather than the platform/account infrastructure dimension. Also covers

• major false flag claim
• large-scale propaganda campaign
• media manipulation

Does not cover

• PROPAGANDA vs. POLITICS: state-to-foreign-population propaganda campaigns → IF04. A government’s domestic public relations campaign or political messaging → POLITICAL (01x statements, not an information domain event). The distinction is cross-border/strategic information warfare vs. domestic politics.