Hacker claims to find nightmare loophole inside FIFA's World Cup system

As the 2026 FIFA World Cup is entering its second week, a cybersecurity researcher claims to have found a key weakness in the organization's digital command center.

The researcher used the pseudonym 'Boddahacker.'

The bombshell disclosure allegedly revealed that FIFA's system lacks proper permissions for newly registered users.

So, it means internal platforms can be accessed, which, in turn, puts the security of live broadcasts and other tournament operations at risk.

The researcher found the issue after signing up to FIFA's Agent Platform, according to Cybernews.

It is a public portal that football agents use for obtaining accreditation.

After signing up, the accounts were added to FIFA's Microsoft Entra identity system.

Now, this system is the backbone of several of FIFA's internal platforms.

But the researcher found the alleged loophole on FIFA's Football Data Platform when a workaround was found to an 'access denied' screen there.

Meaning, the front end is showing the restriction only, but it doesn't exist in the backend system.

But it gets worse when the researcher claims the digital flaw granted access to FIFA's Streaming Management Panel.

The platform is reportedly a nerve center of World Cup broadcasts.

While inside, the researcher claims to have access to streaming configurations of each match in the tournament.

But it did not stop there.

According to the researcher, competition management systems, live match dashboards, analytics platforms, commentator support tools, and administrative interfaces have all been accessed via the loophole.

FIFA, meanwhile, has not publicly weighed in on the accusations.