Iran-Linked Hacking Group Claims Breach of FBI Drones Ahead of 2026 World Cup
An Iran-affiliated hacking group, Handala, has claimed it breached FBI-operated first-person view (FPV) drones, gaining access to sensitive data collected over months, including images and intelligence from counterterrorism operations. According to the SITE Intelligence Group, the group alleged the drones were equipped with facial recognition and license plate-reading technology.
In a statement, Handala issued a veiled threat tied to the 2026 FIFA World Cup, warning, “Better tighten your World Cup security… FPVs are everywhere; you never know when one might end up right in your team’s bus.” The FBI has confirmed drones will be deployed for security at World Cup venues, though unauthorized flights are prohibited near stadiums and fan zones. The tournament’s matches began on June 11.
SITE cast doubt on Handala’s claims, noting that at least one video presented as evidence appeared to be unrelated 2024 footage of U.S. police drone software used after tornado damage. The group has a history of making unverified assertions, including a March claim that it hacked an FBI official’s email account.
The incident follows broader warnings from U.S. officials about Iranian cyber threats, particularly after recent U.S. and Israeli strikes on Tehran. The State Department has offered a $10 million reward for information leading to the identification of Handala members.
Federal Bureau of Investigation (FBI) cybersecurity rating report: https://www.rankiteo.com/company/fbi
"id": "FBI1781282098",
"linkid": "fbi",
"type": "Breach",
"date": "3/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Law Enforcement/National Security',
'location': 'United States',
'name': 'Federal Bureau of Investigation (FBI)',
'size': 'Large',
'type': 'Government Agency'}],
'attack_vector': 'Unknown',
'data_breach': {'personally_identifiable_information': 'Yes (facial '
'recognition and '
'license plate data)',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Images, intelligence data, '
'facial recognition data, license '
'plate-reading data'},
'description': 'An Iran-affiliated hacking group, Handala, has claimed it '
'breached FBI-operated first-person view (FPV) drones, gaining '
'access to sensitive data collected over months, including '
'images and intelligence from counterterrorism operations. The '
'group alleged the drones were equipped with facial '
'recognition and license plate-reading technology and issued a '
'veiled threat tied to the 2026 FIFA World Cup.',
'impact': {'brand_reputation_impact': 'Potential reputational damage to FBI '
'and U.S. security agencies',
'data_compromised': 'Sensitive images and intelligence from '
'counterterrorism operations, facial '
'recognition data, license plate-reading data',
'identity_theft_risk': 'High (facial recognition and license plate '
'data)',
'operational_impact': 'Potential compromise of counterterrorism '
'operations and World Cup security',
'systems_affected': 'FBI-operated FPV drones'},
'investigation_status': 'Ongoing',
'motivation': 'Geopolitical, Threat to 2026 World Cup security',
'references': [{'source': 'SITE Intelligence Group'}],
'stakeholder_advisories': 'U.S. officials have warned about Iranian cyber '
'threats; State Department offers $10 million '
'reward for information on Handala members',
'threat_actor': 'Handala',
'title': 'Iran-Linked Hacking Group Claims Breach of FBI Drones Ahead of 2026 '
'World Cup',
'type': 'Cyber Espionage'}