A pro-Palestine cyber group tied to Iran, known as Handala, claims to have compromised FBI surveillance drones during the World Cup. The group has issued threats against team buses across the U.S., Canada, and Mexico.

Handala's claim of breaching FBI facial recognition drones

Handala, a pro-Palestine cyber threat organization linked to Iran, asserts it has gained access to live feeds from first-person view (FPV) drones. According to the report, these drones were deployed by the FBI for counterterrorism purposes and are equipped with advanced facial recognition and license plate screening capabilities. The group claims to have intercepted data from these systems, which are intended to monitor security during the tournament.

The group specifically targeted the safety of participating teams, warning on social media that drones could potentially end up "right in your team's bus." This threat coincides with the start of the tournament on Thursday, which is being co-hosted by the United States, Canada, and Mexico. The timing is particularly sensitive as the U.S. Men's National Team is scheduled to begin its campaign on Friday against Paraguay.

In response to these claims, U.S. authorities have ramped up security preparations. The FBI and the Department of Justice have warned of heightened cyber risks from Iranian state-affiliated actors, particularly as Middle East tensions escalate following U.S.-Israeli strikes on Tehran earlier this year. To counter physical threats, officials have enforced a no-fly zone for unauthorized unmanned aerial vehicles over tournament venues and deployed additional drones around stadiums and fan zones.

SITE Intelligence Group casts doubt on Handala's leaked footage

While Handala shared screenshots and video footage to support its claims of a security breach, the authenticity of these materials is under heavy scrutiny. SITE Intelligence Group, which monitors extremist online activity, has cast doubt on whether the provided evidence is genuine or merely a fabrication designed to create panic. As reported by SITE Intelligence Group, the materials do not definitively prove that the FBI's drone infrastructure was penetrated.

This discrepancy leaves a critical question unanswered: whether the FBI's drone feeds were actually compromised or if Handala is engaging in a campaign of psychological warfare. The report does not confirm any official verification of the breach from the Department of Justice, and it remains unclear if the "live feeds" mentioned by the hackers were real-time data or pre-recorded footage from other sources.

A $10 million bounty and the Kash Patel email breach

The current threats follow a pattern of targeted aggression from Handala against U.S. intelligence leadership. In March, the group claimed to have hacked the personal email account of FBI Director Kash Patel, allegedly leaking private correspondence that dated back to 2010. This previous incident established Handala as a persistent threat capable of targeting high-level government officials.

The U.S. government has treated these breaches as serious national security threats. The State Department has offered a reward of up to $10 million for information that leads to the identification and location of Handala's members. This aggressive bounty reflects the perceived danger of the group's ties to Iranian state interests and its ability to disrupt U.S. operations.

From Mexico City protests to Omar Artan's visa denial

The cyber threats are just one of several disruptions facing the 2026 World Cup. The tournament's opening match in Mexico City was marred by violent protests , and geopolitical friction continues to shadow Iran's participation in the event. These physical disruptions suggest a volatile atmosphere surrounding the tournament's host cities.

Administrative and diplomatic failures have also plagued the event's organization. For instance, Somali referee Omar Artan was denied entry to the U.S. due to visa disputes, preventing him from attending the tournament. These issues, combined with the threats from Handala, highlight the immense logistical and security challenges of hosting a global event across three different nations during a period of intense international instability.