Handala Claims FBI Drone Breach, Warns of 2026 World Cup Risk

Handala, an Iran-linked hacktivist group, claims it breached first-person view (FPV) drone feeds used by the FBI and warned that team buses at the 2026 World Cup could be targeted.

The group released a statement asserting it had access “for months” to FPV footage and that it could view drone streams used for counterterrorism checks. In the statement Handala warned: “Better tighten your World Cup security, we don’t like some of those teams at all. Don’t forget: FPVs are everywhere; you never know when one might end up right in your team’s bus.”

FPV drones can capture live video that may be run through facial recognition and license-plate readers to screen for known threats. If the group’s claim is accurate, adversaries could observe movements tied to teams or support staff.

Security analysts questioned the material Handala released. At least one video the group cited was traced to a software company’s promotional clip from December 2024, raising doubts about whether all published footage came from live FBI systems.

Handala presents itself as a pro-Palestinian collective. U.S. officials and Western researchers assess the group as a front for Iranian intelligence. The group has claimed responsibility for multiple cyber operations since December 2023, and sources say its activity increased after reported U.S.-Israeli strikes on Tehran in February.

In March Handala published what it claimed were files from the personal email of Kash Patel, including a resume and older photographs. The FBI has not publicly confirmed the drone-breach claim. The State Department has offered up to $10 million for information leading to the identification of Handala members.

The World Cup runs through July 19 in 16 U.S. cities. Federal law enforcement boosted security at venues, teams and transport routes, deploying personnel and technology and planning secure transport corridors and vehicle checks using video feeds and automated identification systems.

Officials have not publicly released intelligence directly linking Handala to an operational plot against the tournament. Analysts who reviewed the group’s online posts say some material appears to be reused or previously published footage.