260608-1600z

Subject	FIFA World Cup 2026 — Threat Assessment & Operator Impact Analysis
Purpose	Provide MAGNET operators with an analytical threat assessment covering terrorism, infrastructure stress, communications, public health, civil unrest, and emergency services degradation across all 11 US host cities for the duration of the tournament (June 11 – July 19, 2026).
DTG	260608-1600Z
Reporting Period	June 11 – July 19, 2026 (active tournament window)
Geographic Focus	United States — Los Angeles, San Francisco Bay Area, Seattle, Kansas City, Dallas, Houston, Boston, New York/New Jersey, Philadelphia, Atlanta, Miami
Precedence	RR – ROUTINE
MagCon Status	L3 – ELEVATED (ALL REGIONS) — Escalate to L2 HIGH for host regions on Quarterfinal, Semifinal, and Final dates
OSINT Seed	W9BVM — World Cup Overview / US Impacts (unchecked AI submission, S2-verified)
Sources	Multi-source: CSIS, Recorded Future/Insikt Group, AP, ESPN, Fox 13 Seattle, CNN, CNBC, US House Armed Services Committee, Al Jazeera, Reuters, FIFA official records. See source list.

The 2026 FIFA World Cup presents a threat environment with no domestic precedent. The tournament runs June 11 through July 19, 2026, across 11 US host cities — the largest sustained mass gathering event in US history at 104 matches over 39 consecutive days. Three factors distinguish this tournament and substantially elevate the threat picture beyond any prior US-hosted mega-event: (1) the United States is at war with Iran, which qualified for and then withdrew from the tournament, creating a persistent adversarial threat environment; (2) a confirmed improvised explosive device was discovered near a World Cup fan zone in Kansas City in March 2026; and (3) more than 400 law enforcement agencies are committed to tournament security, creating simultaneous emergency services degradation across all 11 host cities for the full tournament window. MAGNET operators should treat June 11 – July 19 as an extended elevated-risk operational period and plan movement, communications, and emergency response expectations accordingly.

The FIFA World Cup 2026 is the first tournament hosted by three nations (USA, Canada, Mexico) and the first to feature 48 participating teams, up from the previous standard of 32. The United States hosts 11 of 16 total venues, bearing the majority of the tournament’s operational, security, and infrastructure burden. The World Cup Final on July 19 is hosted at MetLife Stadium in East Rutherford, New Jersey — the most heavily secured sporting event ever held on US soil.

The tournament arrives against a backdrop of active US-Iran armed conflict following US and Israeli airstrikes that killed Iran’s Supreme Leader Ayatollah Ali Khamenei. Iran subsequently announced it could not participate in the tournament. Russian state actors have conducted cyber operations targeting every Olympics in the past decade. Algerian jihadists plotted against the 1998 World Cup; ISIS attacked the Stade de France during a 2015 France-Germany match and later plotted against the 2024 Paris Olympics. The current threat environment is assessed as the most complex for a US-hosted sporting event since the 2002 Salt Lake City Winter Olympics.

In parallel, a WHO-declared public health emergency of international concern is active — an Ebola (Sudan strain) outbreak in Congo and Uganda — coinciding with the arrival of millions of international visitors across North America.

Threat Domain	Level	Assessment	Affected Regions
Terrorism / Mass Casualty	L2 HIGH	First World Cup in history where a co-host nation (US) is at war with a participating nation (Iran). Iranian state media branded the national team delegation “Minab-168” — after a February 2026 US/Israeli airstrike they allege killed 168 civilians. CSIS and Recorded Future both assess Iran as the most active state-level threat actor. A DOJ arrest of a Kataib Hezbollah-linked operative who planned to target synagogues and Jewish centers in Arizona, Los Angeles, and New York was announced May 15. ISIS, lone-wolf jihadist, and domestic violent extremist threats are all assessed as elevated. A bag containing 20 improvised explosive devices was discovered near the Liberty Memorial World Cup fan zone in Kansas City in March 2026.	All host regions — elevated risk at LA and Seattle (original Iran group stage venues)
Transportation Infrastructure	L2 HIGH	The Northeast I-95 corridor and Amtrak NEC will operate at or near capacity for the full 39-day window. AT&T Stadium (Dallas/Arlington) has no direct rail — total vehicle dependency for 9 matches. Arrowhead Stadium (Kansas City) similarly has no light rail. Security cordons around venues will close or restrict normal vehicle routes on match days. Emergency services access to host venue areas will be degraded during match operations.	MR01, NE Corridor, Texas, Kansas City
Communications / Spectrum Congestion	L3 ELEVATED	Simultaneous presence of millions of international visitors will stress cellular capacity in host city cores. FBI Joint Operations Centers will be active in all 11 host cities, consuming significant federal comms bandwidth. Security perimeters will include drone bans enforced by counter-UAS systems — RF jamming or counter-drone emissions may affect amateur radio operations near venues. MAGNET operators near stadiums on match days should anticipate degraded cellular and possible RF interference.	All host regions — worse near venues on match days
Public Health	L3 ELEVATED	Active Ebola (Sudan strain) outbreak in Congo and Uganda — WHO declared public health emergency of international concern. DRC fan travel to the US is barred under an entry restriction. Active measles surge in multiple source countries. Mass gatherings accelerate respiratory illness transmission. US has withdrawn from WHO, complicating real-time international disease intelligence sharing — Georgetown University / MedStar Health Security Operations Center is issuing daily situation reports to state and local health officials as a substitute.	All host regions — stadium corridors highest risk
Emergency Services Surge	L3 ELEVATED	More than 400 law enforcement agencies are engaged across 11 host cities. $625M in federal FEMA grants distributed, plus $250M specifically for counter-drone operations. Local emergency services will have degraded availability for non-tournament emergencies on match days. Secondary host locations (fan camps, base camps, team hotels) in smaller cities may have insufficient security and emergency resources — federal officials have specifically flagged this gap.	All host regions and surrounding communities
Civil Unrest / Counter-Protest	L3 ELEVATED	The Iran-US war and the tournament’s geopolitical backdrop create conditions for politically motivated protest activity at or near host venues. Iranian influence operations have promoted #NoUSHosts and #GoalsNotGuns hashtags. Domestic anti-immigration sentiment and the tournament’s international visitor profile may generate tension in communities hosting team base camps outside major cities. No confirmed organized civil unrest plots as of report DTG, but conditions are permissive.	All host regions; elevated near team base camps
Cyber / Influence Operations	L3 ELEVATED	Russia has targeted every Olympics in the past decade with cyber operations. Iranian influence actors are actively engaged in anti-hosting narrative operations. Financially motivated threat actors are exploiting heightened geopolitical tensions and global visibility. Recorded Future (Insikt Group) has documented active Iranian state-affiliated promotion of destabilizing narratives. Phishing, ticketing fraud, and counterfeit merchandise operations are standard mass-gathering cyber threats at scale.	All regions — MAGNET operators should be vigilant
Airport / Air Travel Disruption	L4 HEIGHTENED	International arrival volumes at gateway airports (EWR, LAX, ATL, MIA, ORD, IAH) will be significantly elevated for the full tournament window. Hartsfield-Jackson (ATL) is already the world’s busiest airport — Semifinal week will test capacity limits. DHS has signaled willingness to pull CBP officers from EWR to support Delaney Hall security, creating potential secondary air travel delays at Newark. MAGNET operators with travel plans through these airports should build in significant additional dwell time.	MR01, Atlanta, Miami, Houston, LA

Indicator
▸ Federal threat posture changes (DHS, FBI, NCTC public advisories)
▸ Venue-area arrests / suspicious package reports
▸ Protest mobilization near fan zones or team base camps
▸ RF interference reports near stadiums from counter-UAS or JOC operations
▸ EMS mutual-aid activation requests in host cities
▸ Public health advisories tied to travel clusters or mass gathering venues

The following assessment covers threat impacts specific to each MAGNET region with a host venue. Operators in non-host regions should note that transportation, public health, and communications impacts extend well beyond the immediate host metro areas.

Region	Primary Threats / Operator Impacts	Peak Risk Window
MR01 Newark / NJ	World Cup Final July 19 brings unprecedented global media presence, security lockdown, and transportation gridlock to the MetLife/East Rutherford area. EWR airport at maximum international arrival capacity. Ongoing Delaney Hall civil unrest (separate active S2 IR) adds compounding stress to MR01 law enforcement and emergency services. PATH/NJ Transit/I-95 NJ Turnpike near capacity from July 14 forward. Treat July 18–19 as a near-blackout period for normal movement in the NY/NJ metro.	July 14–19 (Final week) L2 HIGH recommended
MR09 San Diego / LA	SoFi Stadium (Inglewood) hosted Iran’s group stage games in the original draw. Iran has withdrawn — Group G slots will be reassigned, reducing but not eliminating Iranian-linked threat vectors in LA. US opener June 12 generates immediate high-traffic impact. Quarterfinal July 10 is the regional peak. I-5/I-405 corridor congestion extends into San Diego County on LA match days. LAX international arrivals elevated throughout tournament.	June 12 (US opener) July 10 (QF)
Midwest Kansas City	Sole Midwest host city bears the full regional logistical burden. Confirmed IED discovery near Liberty Memorial (World Cup fan zone) in March 2026 — the most concrete pre-tournament security incident identified in this report. No direct transit to Arrowhead Stadium — total highway dependency. I-70/I-435 heavily congested on match days. Secondary team base camp locations throughout the region may have insufficient security resources per federal assessment.	Group stage through QF July 11 IED history warrants L2
South Atlanta	Hartsfield-Jackson (ATL) is the primary international connection hub for the entire tournament — already the world’s busiest airport, now processing substantially elevated international volumes. ATL congestion creates cascading delays for MAGNET operators connecting through the airport for non-tournament purposes. Mercedes-Benz Stadium Semifinal (July 15) generates maximum regional law enforcement commitment, degrading emergency services availability for non-tournament emergencies.	Group stage 6/15+ Semifinal 7/15 — L2 recommended
Texas	AT&T Stadium in Arlington hosts 9 matches — no rail access, total vehicle dependency creating severe I-30/SH-360 congestion on every match day from June 14 through Semifinal July 14. Dallas and Houston together create sustained Texas-wide interstate pressure for 5+ weeks. Match day emergency services availability in Arlington is significantly reduced — the area is effectively inaccessible for normal emergency response during events.	June 14 through Semifinal 7/14 Sustained elevated
South Miami	Primary gateway for Latin American and Caribbean international fans — MIA and FLL airports sustain elevated international arrivals throughout the full 39-day window. Hard Rock Stadium hosts both a Quarterfinal (July 11) and Third-Place match (July 18) — two back-to-back high-profile events in the final tournament week, creating sequential peak stress periods with insufficient recovery time for local infrastructure between them.	QF July 11 3rd place July 18 Back-to-back peaks
Northeast Corridor	Boston–Philadelphia–NY/NJ functions as a continuous 39-day mass gathering corridor. Amtrak NEC and I-95 will operate at or near capacity from tournament onset. The six-day QF-through-Final sequence (July 9 Boston QF through July 19 NY/NJ Final) represents the most sustained infrastructure stress period of the entire tournament. Operators planning NEC rail travel during this window should book well in advance and identify alternate routes.	Sustained June–July Peak July 9–19

Concern	Operator Guidance
Movement Near Host Venues	Treat a 2–3 mile radius around any host stadium as effectively inaccessible on match days. Security cordons, vehicle restrictions, and law enforcement presence will make normal transit through these corridors impractical. Plan alternate routes now.
RF / Comms Environment	Counter-drone operations ($250M federal investment) and FBI JOC communications infrastructure will be active near all 11 host venues. MAGNET operators with repeaters or HF operations near host venues should monitor for unusual interference. Cellular congestion near stadiums on match days will degrade digital comms tools.
Emergency Services Availability	Local emergency services in host cities will have degraded availability for non-tournament calls on match days. In a genuine emergency near a host venue on a match day, expect significantly extended response times. Self-sufficiency and mutual aid posture should be elevated.
Public Health Precautions	Operators attending matches or fan zones should observe standard mass-gathering precautions: hand hygiene, avoid symptomatic individuals, maintain situational awareness regarding health advisories. Ebola risk at venues is assessed as low — measles and respiratory illness represent the more realistic transmission concerns in mass gathering settings.
Secondary Locations / Base Camps	Team base camps and fan zones in smaller cities adjacent to host metros are specifically identified by federal officials as under-resourced for security. These locations may attract protest activity or threat actors who anticipate lighter security footprints than the main stadiums. MAGNET operators in these areas should maintain heightened awareness.
MR01 — Compounding Threats	MR01 faces simultaneous elevated threat loads: (1) ongoing Delaney Hall civil unrest at 451 Doremus Ave, Newark; (2) World Cup Final week operations at MetLife Stadium. These are geographically separate but compete for the same law enforcement, emergency services, and transportation resources. Treat July 14–19 as the highest-risk operational window of the year for MR01.

• All regions: Assign L3 ELEVATED now. Pre-position go-kits, review alternate routes, and identify non-congested communication paths in advance of June 11 tournament onset.
• MR01: Treat July 14–19 as the highest-risk operational window of the year. Delaney Hall civil unrest and World Cup Final operations create compounding stress on the same regional resources. Avoid the Doremus Ave corridor and the MetLife/East Rutherford corridor simultaneously during this period.
• Kansas City / Midwest: Elevate to L2 HIGH immediately given the confirmed March 2026 IED discovery near a World Cup fan zone. This is an active threat indicator, not a theoretical concern.
• All operators near host venues: Map counter-drone Temporary Flight Restrictions and RF-sensitive zones around stadiums before operating HF or VHF/UHF equipment in those areas. Contact ARRL and FCC resources for updated spectrum advisories as the tournament progresses.
• Monitor the Georgetown University / MedStar Health Security Operations Center daily situation reports for public health developments. MAGNET S2 will track and report any threat-level changes for Ebola or other infectious disease developments that cross the low-risk threshold.
• Flag as a standing S2 intelligence requirement through July 19, 2026. S2 will produce delta updates for any significant threat developments — terrorism alerts, civil unrest escalation, public health advisories, or infrastructure disruption events — across host regions.

Confidence: HIGH. The threat environment described in this report is drawn from US government statements, federal agency briefings, and credible private-sector threat intelligence organizations (CSIS, Recorded Future/Insikt Group). The IED discovery in Kansas City is sourced to a congressional letter citing law enforcement confirmation. Seeded from OSINT submission by W9BVM; S2 verification and analytical expansion conducted independently across 12 authoritative sources.

Note: This report reflects conditions as of 260608-1600Z. The situation is actively evolving. S2 will issue delta updates as significant new threat developments emerge.

• [1] CSIS — The Terrorist Threat to the 2026 World Cup (May 2026)
• [2] Recorded Future / Insikt Group — Threats to the 2026 FIFA World Cup
• [3] AP / NBC Philadelphia — World Cup Poses Unprecedented Security Challenge (June 2026)
• [4] ESPN — World Cup Security: Unprecedented Challenge (June 2026)
• [5] AP / WUSF — Security Planners Brace for Unprecedented Threats (June 2026)
• [6] Fox 13 Seattle — Federal Officials Outline Seattle World Cup Security Plan (June 2026)
• [7] CNN — World Cup Testing the Public Health Playbook (May 2026)
• [8] CNBC — World Cup 2026: Health Officials Focused on Ebola, Measles (June 2026)
• [9] Rep. Alford / US House — World Cup Security Funding Letter — IED Kansas City (March 2026)
• [10] Al Jazeera — Iran Participation, Visa Ban, Mexico Violence (March 2026)
• [11] Flash Score / Reuters — Iranian Sports Minister: Iran Cannot Participate in 2026 World Cup
• [12] FIFA — Official World Cup 2026 Venue & Tournament Information