Iran-linked hackers Handala threaten 2026 World Cup security, claim FBI drone hack

An Iran-linked hacking group that previously made headlines for claiming it hacked FBI Director Kash Patel’s email account has threatened security at the 2026 FIFA World Cup—and said it hacked FBI surveillance drones being used around tournament venues.

According to a report by CBS News on Friday, the SITE Intelligence Group, which monitors extremist organizations and online threat activity, reported that Handala claimed it had accessed data collected by drones allegedly operated by the U.S. Federal Bureau of Investigation.

In a statement attributed to the group, Handala obtained access to “every image and every suspect” captured by the drones, which they said include facial recognition and license plate scanning technology. This footage, the group claimed, goes back “for months.”

In addition to claiming access to FBI drones, Handala also issued a threat directed at teams participating in the World Cup tournament.

“Better tighten your World Cup security, we don't like some of those teams at all,” the group reportedly said. “[First-person view drones] are everywhere; you never know when one might end up right in your team's bus.”

The claim comes amid heightened tensions between Washington and Tehran following the U.S.-Israeli strikes on Iran earlier this year. According to the U.S. Department of Justice, Handala is linked to Iran's Ministry of Intelligence and Security and has been associated with data theft, wiper malware, and online influence campaigns that use leaked data, threats, and media attention to pressure and intimidate targets.

The news of Handala's threats comes as law enforcement agencies warn that scammers are targeting World Cup fans as the global soccer tournament gets underway across North America.

The claims have not been independently verified. SITE disputed some of the material released by Handala, saying one video presented as evidence of the breach was actually produced in December 2024 by a software company promoting technology used by a U.S. police department to survey tornado damage.

In March, the group claimed it hacked the email account of FBI Director Kash Patel and published personal photos and other material online. More recently, the group claimed responsibility for a breach of California Water Service, releasing roughly five gigabytes of allegedly stolen customer and internal company data.