Iran-Linked Hacker Group Handala Threatens 2026 World Cup After Claiming FBI Drone Breach
An Iran-linked hacker collective calling itself Handala has claimed it broke into FBI surveillance drones and issued a direct threat against the 2026 FIFA World Cup, according to the SITE Intelligence Group.
The warning emerged just days into a tournament already under heavy federal security, with the group specifically naming team buses as a potential target. The threat amplifies concerns over cybersecurity at one of the world's most-watched sporting events, which runs through July 19 across 16 U.S. cities.
Handala presents itself as a pro-Palestinian hacktivist outfit, but U.S. officials and Western researchers assess it as a front for Iranian intelligence operations. Since December 2023, the group has targeted Israeli-linked entities and other adversaries. Its activity escalated notably after U.S.-Israeli strikes on Tehran in February.
In March, Handala claimed it had hacked the email of FBI Director Kash Patel, publishing personal photos and other material. The group's latest声称 alleges it had accessed footage from first-person view (FPV) drones used by the FBI for months. According to Handala, these drones perform facial recognition and license plate checks for counterterrorism purposes.
“Better tighten your World Cup security, we don’t like some of those teams at all. Don’t forget: FPVs are everywhere; you never know when one might end up right in your team’s bus,” the group said in a statement quoted by SITE.
However, SITE questioned the credibility of Handala's proof. Analysts at the monitoring group found that one supposed hack video was actually a promotional clip from a software firm dated December 2024, casting doubt on the authenticity of the broader claims.
The U.S. State Department is offering up to $10 million for information leading to the identification of Handala members, underscoring how seriously Washington treats the group. The reward highlights the persistent threat posed by Iran-linked cyber actors as geopolitical tensions simmer.
Whether the threat proves real or not, it raises the security stakes for a tournament expected to draw billions of viewers worldwide. The incident serves as a reminder that major international events remain prime targets for state-backed disinformation and cyberattacks, demanding constant vigilance from law enforcement and intelligence agencies.