An Iran-linked hacking group has claimed it breached FBI drone systems used to support security around the 2026 FIFA World Cup, raising fresh concerns about cybersecurity, public safety and disinformation during one of the largest sporting events ever staged.
The group, known as Handala, said it had gained access to drone surveillance data and threatened tournament participants in a message monitored by the SITE Intelligence Group. The group claimed it had access to images and information collected by drones, including material allegedly tied to surveillance and security operations.
However, the claim has not been confirmed by federal officials. SITE also disputed the authenticity of at least some of the material released by Handala, saying one video presented as part of the alleged hack appeared to come from an unrelated software promotional video produced in December 2024.
That distinction is important. At this stage, the reported breach remains an allegation by a hostile hacking group, not a confirmed compromise of FBI systems.
TRENDING TODAY
The FBI and other federal agencies have not publicly confirmed that any drone infrastructure was breached. Authorities have also not said whether Handala’s claims represent a credible operational threat, an exaggeration, or a propaganda effort designed to spread fear during the World Cup.
The threat comes as the United States, Canada and Mexico host the expanded 2026 World Cup, which includes 48 teams, 16 host cities and millions of fans traveling across North America. Security agencies have been preparing for a wide range of risks, including terrorism, cyberattacks, drone intrusions, crowd safety, transportation disruption and geopolitical protests.
Drones have become a major concern for tournament security planners. Small unmanned aircraft can be used for illegal surveillance, disruptions, smuggling, or in more serious scenarios, attacks near stadiums, hotels, fan zones or team buses. Because World Cup venues are crowded, authorities often focus on detecting drone operators and intercepting threats before they reach restricted areas.
Reuters recently reported that drone security is one of the biggest challenges for the tournament, with federal, state and local agencies coordinating detection systems, flight restrictions and counter-drone planning. The FAA is expected to restrict drones near stadiums on match days, while law enforcement agencies are using intelligence-sharing systems to monitor threats.
FBI Director Kash Patel has described the World Cup as one of the bureau’s defining security tests, citing drones, terrorism and cyberattacks among the main risks. The FBI has been coordinating with local police, international partners and tournament organizers as matches continue across the continent.
Handala’s claim adds another layer of tension because of the ongoing conflict involving the United States and Iran. U.S. officials have repeatedly warned that Iranian-linked cyber actors may target American infrastructure, government systems and private companies during periods of heightened geopolitical confrontation.
The group has been linked to previous cyber incidents and has claimed responsibility for attacks on American targets. Earlier this year, Handala claimed it obtained personal and professional communications tied to FBI Director Kash Patel. Cybersecurity analysts have cautioned that Iran-linked hacking groups and proxy actors often exaggerate the scale of their operations, but their claims can still create disruption and security concerns.
In the World Cup case, Handala’s statement included threatening language aimed at tournament security and teams. The group allegedly warned that organizers should “tighten” security and suggested that drones could be used to target team transportation. Because of the public nature of the threat, authorities are likely to examine whether it represents a real capability or an intimidation campaign.
Cybersecurity experts often warn that threat actors can achieve political effects even without a confirmed breach. A group can post recycled footage, make dramatic claims, and still force governments and event organizers to respond, reassure the public and devote additional resources to investigation.
That appears to be one of the central risks in this case. If Handala’s materials are fake or exaggerated, the claim may still be designed to undermine confidence in World Cup security, embarrass the FBI, and amplify fear during a high-profile global event.
The timing is also sensitive because Iran’s national team is participating in the tournament amid tense relations with Washington. Iran’s matches in the United States have already drawn attention because of visa issues, travel complications, diaspora protests and the broader U.S.–Iran conflict.
Tournament organizers and law enforcement officials have not announced any change to match schedules because of the alleged hack. FIFA has said it remains confident in security planning, while federal agencies continue monitoring threats.
The incident highlights how modern sporting events are no longer protected only by police barriers, metal detectors and stadium security. They also require cybersecurity defenses, drone detection, intelligence monitoring and rapid response to online propaganda.
For fans, the practical message is that authorities are treating drone and cyber threats seriously, but no public evidence has confirmed that FBI drones were compromised in the way Handala claims.
For officials, the challenge is to investigate the claim without amplifying unverified propaganda. If a real breach occurred, federal agencies will face questions about how drone systems were secured and whether sensitive data was exposed. If the claim is false or exaggerated, it will still show how hostile actors can use disinformation to target major events.
The World Cup will continue to test security systems across North America. The Handala claim may be only one of several cyber and information threats authorities face as the tournament moves through its opening stages.
Why It Matters
This matters because the World Cup is a massive security operation involving millions of fans, international teams and venues across three countries. Even unverified cyber claims can create public safety concerns and force authorities to investigate.
It also matters because drones are now a major security issue at large events. If hostile actors can access drone systems, spoof footage, or spread false claims about them, they can disrupt confidence in event security even without carrying out a physical attack.
What Comes Next
Federal investigators are expected to review Handala’s claims and determine whether any FBI systems were actually compromised. Cybersecurity analysts will also examine the images and videos posted by the group to determine whether they are authentic, recycled or manipulated.
Tournament organizers and law enforcement agencies will likely continue monitoring drone threats, cyber activity and online propaganda as World Cup matches continue across North America.
An Iran-linked hacking group claimed it breached FBI drone systems connected to World Cup security, though federal officials have not confirmed the breach and monitors have questioned parts of the material.
An Iran-linked hacker group has claimed to have breached FBI drones, threatening to target the World Cup, according to a new report from a monitoring group https://t.co/hLAz8waSBh 🔗 pic.twitter.com/GhibPictzc
— Daily Mail (@DailyMail) June 12, 2026
