Handala Claims Breach of FBI Drone System Used to Monitor 2026 World Cup, FBI Denies
Handala posted a statement on its social‑media channels saying it had “gained access to the system and was watching the footage the feds are taking as it monitors games.” The group also warned, “We don’t like these teams at all,” as the tournament began. The statement was accompanied by screenshots that the group said showed the FBI’s first‑person view (FPV) drone feeds.
The FBI has publicly denied the allegations. A spokesperson said the claims are false and that the agency is “aware of claims circulating online that a foreign‑linked hacking group accessed FBI unmanned aircraft systems and associated imagery.” The FBI added that it remains fully prepared to protect World Cup venues and that the public should rely on official sources.
Handala’s accusations come after the group claimed it had infiltrated water‑management systems in several California cities. The group posted screenshots that appeared to show residents’ water bills and said the attack was retaliation for U.S. forces striking Iranian reservoirs. California Water Service officials said they found no evidence of a compromise.
The group has a history of high‑profile claims. In March 2026, Handala announced it had hacked the Microsoft Intune mobile‑device‑management console of Stryker Corporation, a U.S. medical‑technology company, and issued remote‑wipe commands that affected up to 200,000 employee devices across 79 countries. The company reported the incident in a March 11 SEC filing.
Handala also claimed responsibility for hacking into the personal email of FBI Director Kash Patel in March 2026. The claim was made public on the group’s social‑media accounts.
Handala is widely described by cybersecurity firms and intelligence analysts as a pro‑Iranian, anti‑Israel hacking group that operates from Iran. The group’s name derives from the Handala symbol, a figure used in Palestinian iconography. According to the Wikipedia entry on Handala, the group first appeared in December 2023 following the October 7 attacks and is believed to be a front for Iran’s Ministry of Intelligence and Security.
The 2026 FIFA World Cup is the first edition of the tournament to be hosted jointly by the United States, Mexico, and Canada. It began on June 11, 2026, and will conclude on July 19. The United States is using drones to monitor the games over the six‑week period, a measure that has attracted attention amid heightened concerns about cyber threats.
The U.S. government seized domains linked to Handala in March 2026 and announced a $10 million reward for information that leads to the identification of the group’s members.
The FBI’s denial comes at a time when the U.S. and Israel launched a joint attack on Iranian targets on February 28, 2026, marking the start of a broader conflict that has seen increased cyber activity from Iranian‑affiliated actors.
The FBI’s statement does not address whether any breach of its drone system has occurred, but it confirms that the agency is monitoring the situation. No independent verification of Handala’s claim has been reported.
The threat issued by Handala is not the first time the group has targeted U.S. infrastructure. Its previous claim of infiltrating California water systems was followed by a statement that the attack was retaliation for U.S. strikes on Iranian reservoirs. The group’s pattern of claims suggests a focus on U.S. and allied targets, though no specific teams were named.
The FBI’s counter‑drone technology and airport‑style screenings are part of a broader security effort for the World Cup. Law enforcement officials have urged the public to report suspicious activity and to rely on official sources for information.
At present, no evidence has been presented that the FBI’s drone system has been compromised. The FBI remains the primary agency responsible for the security of the World Cup venues.
The situation remains fluid. The FBI has not released any further details, and no independent cybersecurity firm has confirmed or denied the breach. The U.S. government continues to monitor the threat landscape as the World Cup progresses.
The next steps will depend on any new information that emerges. If a breach is confirmed, the FBI would likely investigate the source and assess any impact on the security of the tournament. Until then, the FBI’s denial stands, and the World Cup continues under its existing security protocols.