Iran-Linked Hackers Claim FBI Drone Breach, Threaten World Cup

An Iran-linked hacking group called Handala claimed it accessed surveillance footage from FBI-controlled drones and issued threats against teams at the 2026 FIFA World Cup.

Handala claims access to FBI drone data. The group said it obtained "every image and every suspect" captured by drones that include facial recognition and license plate scanning technology. According to a CBS News report cited by SITE Intelligence Group, the footage dates back months. Handala previously claimed responsibility for hacking FBI Director Kash Patel's email account in March.

Threats target World Cup participants. Handala warned teams participating in the tournament to "tighten your World Cup security" because it does not like some of those teams. The group added that first-person view drones are everywhere and "you never know when one might end up right in your team's bus." The threats were reported Friday by SITE Intelligence Group, which monitors extremist organizations and online threat activity.

Researchers question some of the evidence. SITE disputed some material released by Handala. One video presented as proof of the breach was actually produced in December 2024 by a software company promoting technology used by a U.S. police department to survey tornado damage. The broader claims of accessing FBI drone data have not been independently verified.

Handala's ties to Iranian intelligence. The U.S. Department of Justice links Handala to Iran's Ministry of Intelligence and Security. The group has been associated with data theft, wiper malware, and online influence campaigns that use leaked data, threats, and media attention to pressure and intimidate targets. Its latest actions come amid heightened tensions between Washington and Tehran following U.S.-Israeli strikes on Iran earlier this year.

Context of other recent Handala activity. More recently the group claimed responsibility for a breach of California Water Service and released roughly five gigabytes of allegedly stolen customer and internal company data. The announcement arrives as law enforcement agencies warn that scammers are targeting World Cup fans as the global soccer tournament gets underway across North America. The State Department's Rewards for Justice program continues to offer up to $10 million for information on foreign government-directed hackers involved in cyberattacks against U.S. critical infrastructure.