Iran-Linked Hacker Group Claims FBI Drone Breach, Threatens World Cup Security
An Iran-affiliated hacker group, Handala, has claimed responsibility for breaching FBI-operated drones, alleging access to surveillance footage, facial recognition data, and license plate scans used for counterterrorism. The group, monitored by the SITE Intelligence Group, stated it had infiltrated the drones "for months," capturing "every image and every suspect" from first-person view (FPV) drones deployed by the FBI.
In a statement released Friday, Handala issued a veiled threat against the 2026 FIFA World Cup, which began Thursday, warning that "FPVs are everywhere" and could pose risks to teams and events. The FBI is using drones to secure World Cup venues, with flights banned over stadiums and fan zones to prevent unauthorized aircraft.
The U.S. Justice Department had previously warned of potential cyber retaliation from Iranian actors following U.S.-Israeli strikes on Tehran in February, which escalated regional tensions. Handala has a history of cyber operations, including a March claim of hacking the email account of an FBI official and leaking personal photos.
While Handala provided alleged evidence of the drone breach, SITE disputed the authenticity of the footage, identifying one video as promotional material from a U.S. police department’s 2024 tornado response demonstration. The U.S. State Department has offered a $10 million reward for information leading to the identification of the group’s members.
Source: https://www.cbsnews.com/news/iran-linked-group-hack-fbi-drones-world-cup/
FBI Cyber Division cybersecurity rating report: https://www.rankiteo.com/company/fbicyber
U.S. Department of Justice cybersecurity rating report: https://www.rankiteo.com/company/usdoj
FIFA World Cup 2026™ - Canada, Mexico and U.S.A cybersecurity rating report: https://www.rankiteo.com/company/fifa-world-cup-2026
"id": "FBIUSDFIF1781267103",
"linkid": "fbicyber, usdoj, fifa-world-cup-2026",
"type": "Cyber Attack",
"date": "3/2026",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of geographical region"{'affected_entities': [{'industry': 'Law Enforcement, National Security',
'location': 'United States',
'name': 'Federal Bureau of Investigation (FBI)',
'size': 'Large',
'type': 'Government Agency'}],
'attack_vector': 'Unauthorized Access to Drones',
'data_breach': {'data_exfiltration': 'Alleged (claimed by threat actor)',
'personally_identifiable_information': 'Yes (facial '
'recognition and '
'license plate data)',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Surveillance footage',
'Facial recognition data',
'License plate scans']},
'description': 'An Iran-affiliated hacker group, Handala, has claimed '
'responsibility for breaching FBI-operated drones, alleging '
'access to surveillance footage, facial recognition data, and '
'license plate scans used for counterterrorism. The group '
'issued a veiled threat against the 2026 FIFA World Cup, '
'warning of potential risks to teams and events.',
'impact': {'brand_reputation_impact': 'Potential reputational damage to FBI '
'and U.S. security agencies',
'data_compromised': 'Surveillance footage, facial recognition '
'data, license plate scans',
'identity_theft_risk': 'High (facial recognition and license plate '
'data exposed)',
'operational_impact': 'Potential compromise of counterterrorism '
'surveillance and World Cup security '
'operations',
'systems_affected': 'FBI-operated drones'},
'initial_access_broker': {'entry_point': 'FBI-operated drones',
'reconnaissance_period': 'Months (alleged)'},
'investigation_status': 'Ongoing',
'motivation': 'Cyber Retaliation, Disruption of Security Operations, Threat '
'to Major Event (2026 FIFA World Cup)',
'references': [{'source': 'SITE Intelligence Group'},
{'source': 'U.S. Justice Department'},
{'source': 'U.S. State Department'}],
'response': {'third_party_assistance': 'SITE Intelligence Group (monitoring '
'and analysis)'},
'threat_actor': 'Handala (Iran-affiliated hacker group)',
'title': 'Iran-Linked Hacker Group Claims FBI Drone Breach, Threatens World '
'Cup Security',
'type': 'Cyber Espionage, Data Breach, Threat'}