An Iran-linked hacking group known as Handala has claimed it breached FBI drone surveillance systems deployed to secure the 2026 FIFA World Cup, issuing threats against tournament participants. The alleged cyberattack has raised new concerns about cybersecurity and public safety for one of the largest sporting events in history, which is being jointly hosted by the United States, Canada, and Mexico.
"Better tighten your World Cup security. You never know when one might end up right in your team’s bus." — Handala, Hacking Group (as cited by SITE Intelligence Group)
According to reports monitored by the intelligence organization SITE Intelligence Group, Handala alleged it gained access to federal drone surveillance systems months before the tournament commenced. The group claimed to possess sensitive imagery and intelligence collected through the program, stating it had access to "every image and every suspect" gathered by the drones. In a statement cited by SITE, Handala issued a stark warning: "Better tighten your World Cup security. You never know when one might end up right in your team’s bus."
The hackers also released photographs and video footage, asserting these materials originated from the compromised drones. However, SITE Intelligence Group has disputed the authenticity of this particular claim, stating it has not independently verified that the visuals indeed came from FBI systems. Federal officials have not publicly confirmed any breach of their drone infrastructure related to the World Cup security operations.
The alleged threat surfaced as the United States men’s national team began its World Cup campaign and as authorities across North America continued implementing extensive security measures for the month-long tournament. The 2026 World Cup features an expanded field of teams and is projected to attract millions of spectators across the continent. Law enforcement agencies, including the FBI, have previously announced plans to utilize unmanned aerial systems around tournament venues to bolster public safety and counterterrorism efforts. These security deployments also include intelligence-sharing networks and counter-drone systems designed to detect and prevent unauthorized aircraft activity near stadiums and fan zones.
Handala has been linked to previous cyber incidents targeting American institutions. Earlier this year, the group claimed responsibility for obtaining personal and professional communications allegedly connected to FBI Director Kash Patel. The U.S. State Department has underscored the seriousness of such threats by offering a reward of up to $10 million for information leading to the identification or location of individuals associated with the organization.
The latest claims from Handala emerge amidst heightened tensions between the United States and Iran, following months of conflict and regional instability in the Middle East. Federal officials have repeatedly issued warnings that Iranian-linked cyber actors may attempt to target American infrastructure, businesses, and government systems. These geopolitical dynamics add a complex layer to the ongoing cybersecurity challenges.
Security concerns surrounding the World Cup have also been amplified by various logistical and political challenges affecting the tournament. Reports of visa complications, travel disruptions, and demonstrations have surfaced in several host cities since the competition began. Iran’s national team itself has drawn attention due to the ongoing geopolitical situation, with team officials adjusting travel and training plans and limiting public comments regarding the broader conflict.
FIFA President Gianni Infantino has publicly defended tournament preparations and expressed confidence in the comprehensive security measures implemented by the host nations. Authorities have not yet indicated whether Handala’s claims represent a credible, actionable threat or if they are primarily a disinformation effort intended to generate fear and publicity. Cybersecurity experts frequently caution that threat actors may exaggerate their capabilities to attract attention or undermine public confidence in security systems. Federal investigators continue to monitor potential threats closely, while tournament organizers proceed with preparations for matches expected to draw some of the largest crowds in World Cup history.
