The U.S. Department of Justice (DOJ) has seized nearly 400 internet domains that were illegally streaming FIFA World Cup 2026 matches.
The operation, known as Operation Offsides, targeted websites distributing unauthorized live broadcasts while also highlighting the cybersecurity risks often associated with illegal streaming platforms.
According to the DOJ, the seized websites provided unauthorized real-time streams of World Cup matches in violation of U.S. copyright law.
“We have seized hundreds of domains, used to illegally stream World Cup matches for profit, to disrupt the international networks that profit from the global popularity of the World Cup,” said Assistant Attorney General A. Tysen Duva of the Justice Department’s Criminal Division, in the press release.
Key Takeaways
- The U.S. Department of Justice seized nearly 400 domains used to illegally stream FIFA World Cup 2026 matches as part of Operation Offsides.
- The international operation targeted illegal streaming infrastructure across Peru, Bulgaria, Croatia, Romania, Poland, and Colombia with support from FIFA and industry partners.
- Officials warned that illegal streaming sites can expose users to malware, phishing attacks, malicious redirects, and data theft in addition to copyright violations.
- The DOJ says the takedown is part of a broader effort to disrupt criminal piracy networks while protecting consumers from associated cyber risks.
International Operation Targets Global Streaming Infrastructure
The enforcement action extended well beyond the United States.
Through the International Computer Hacking and Intellectual Property (ICHIP) Network, authorities targeted illegal streaming infrastructure in Peru, Bulgaria, Croatia, Romania, Poland, and Colombia.
Investigators confirmed the domains were illegally streaming World Cup matches, with FIFA and several media partners helping identify the infrastructure.
Illegal Streaming Can Introduce Cybersecurity Risks
While the operation focused on copyright enforcement, officials also emphasized the cybersecurity dangers associated with unauthorized streaming sites.
According to Eric Weindorf, Special Agent in Charge of Homeland Security Investigations (HSI) Washington Field Office, illegal streaming platforms frequently expose users to additional cyber threats beyond copyright violations.
“These streamers not only violate copyright laws but also expose viewers to potential threats—including malware attacks and unsecure connections that can compromise personal and financial data,” Weindorf said.
Many unauthorized streaming websites rely on aggressive advertising networks, malicious redirects, fake browser updates, and phishing campaigns to generate revenue.
Some also attempt to install malware or collect sensitive information from unsuspecting visitors.
Protecting Intellectual Property Through Global Cooperation
Operation Offsides reflects the growing role of international cooperation in combating digital piracy.
U.S. prosecutors worked alongside foreign law enforcement agencies through the ICHIP program, which provides cybercrime and intellectual property expertise to partner nations.
The initiative is part of a broader DOJ effort to disrupt online criminal ecosystems that profit from copyrighted content while protecting consumers from associated cyber risks.
According to the Criminal Division’s Computer Crime and Intellectual Property Section (CCIPS), the department has secured convictions against more than 180 cybercrime and intellectual property offenders since 2020 and recovered more than $350 million in victim funds.
As the FIFA World Cup continues across host cities in the United States, Canada, and Mexico, officials say enforcement efforts against illegal streaming operations will remain ongoing.
The takedown serves as a reminder that unauthorized streaming platforms may expose users to far more than copyright infringement, creating opportunities for malware infections, phishing attacks, and the theft of personal and financial information.
Organizations can reduce the risk of malware, phishing, unauthorized access, and other attacks by implementing zero trust solutions.