The Transportation Security Administration (TSA) is issuing this Cybersecurity Awareness Message (CAM) to provide our industry partners with best practices, current cybersecurity risks, recent incidents, and planning considerations ahead of the 2026 FIFA World Cup (FWC 26) events. This CAM is not in response to any specific threat or incident.
The FWC 26 will be held across three North American countries from June 11 through July 19. Eleven US cities will host 48 teams in 78 of the tournament’s 104 games. As one of the largest global sporting events, FWC 26 will span multiple cities encompassing vital portions of critical infrastructure. Its scale, visibility, and reliance on interconnected digital and physical systems heighten exposure and susceptibility to cyber threats, including those targeting operational technology (OT). High-profile events like the FWC 26 are attractive targets for cybercriminals, hacktivists, and state-sponsored actors seeking to exploit increased digital traffic and interconnected infrastructure.
Even though this TSA CAM is directed to surface transportation owners and operators, all agencies and organizations are encouraged to review the attached message and take appropriate steps to protect yourself from malicious actions of cybercriminals.
Reporting:
The NJCCIC encourages recipients who discover signs of malicious cyber activity to contact the NJCCIC via the cyber incident report form.
Please do not hesitate to contact the NJCCIC at njccic@cyber.nj.gov with any questions. Also, for more background on our recent cybersecurity efforts, please visit cyber.nj.gov.
