Cybercriminals Cash In On World Cup Frenzy, Selling Stolen Streaming Accounts

As the 2026 FIFA World Cup reaches its climax, a shadowy market is thriving in the dark corners of the internet, where cybercriminals are cashing in on the global sporting event by selling millions of stolen streaming accounts. The lucrative black market has seen threat actors releasing a record 802,000 compromised accounts on a single day, generating an estimated $14.8 million in potential single-day revenue, according to a recent report from HUMAN Security's Satori Threat Intelligence team.

Background & Context

The FIFA World Cup is one of the most widely viewed sporting events in the world, with millions of fans tuning in to watch their favorite teams compete for the coveted championship title. For the first time, the tournament has been hosted jointly by three nations—the U.S., Canada, and Mexico—making it the largest World Cup in history, with a total of 48 national teams participating.

The event has seen a significant increase in viewership, with each marquee matchup setting a new viewership benchmark. The semifinal match between Spain and France drew a then-record 11.46 million viewers on Fox, while Argentina's semifinal win over England surpassed it with 15.06 million viewers, setting the stage for what is expected to be a record-breaking final match.

Key Details

According to the report, more than 12 million compromised user accounts on the dark web are tied to 10 streaming services broadcasting World Cup matches, representing nearly $220 million in potential black-market sales. The findings suggest that cybercriminals are treating the tournament like any other high-demand event, expanding their inventory while raising prices as consumer demand grows.

Lindsay Kaye, VP of threat intelligence at HUMAN Security, noted that rising prices for stolen streaming accounts suggest demand is growing as more fans seek cheaper access to World Cup broadcasts. "If somebody doesn't want to pay $30, $40, or $50, they can pay $5 and have access to that streaming service in order to watch the World Cup," she said.

The report couldn't determine exactly how the compromised streaming accounts were obtained, but Kaye said cybercriminals commonly use stolen usernames and passwords from the dark web or credentials stolen by malware that extracts information saved on victims' devices. Those credentials are then resold on dark web marketplaces, where sellers advertise extras such as linked payment cards.

What Experts Say

The findings of the report highlight the growing threat of cybercrime during major global events, where the demand for streaming services creates a lucrative opportunity for threat actors to exploit compromised accounts. The report's findings also underscore the importance of securing streaming services and protecting user credentials to prevent the theft of sensitive information.

Key Takeaways

• More than 12 million compromised user accounts on the dark web are tied to 10 streaming services broadcasting World Cup matches, representing nearly $220 million in potential black-market sales.
• The findings suggest that cybercriminals are treating the World Cup like any other high-demand event, expanding their inventory while raising prices as consumer demand grows.
• Rising prices for stolen streaming accounts suggest demand is growing as more fans seek cheaper access to World Cup broadcasts.
• The report highlights the importance of securing streaming services and protecting user credentials to prevent the theft of sensitive information.

What This Means For You

As the World Cup comes to a close, fans are left to wonder about the potential risks of streaming services and the importance of securing their accounts. In reality, the impact of cybercrime during major global events extends far beyond the tournament itself, with compromised accounts and stolen credentials posing a significant threat to individual security and financial well-being.

To protect yourself from the growing threat of cybercrime, consider taking the following steps: use strong, unique passwords for each streaming service; enable two-factor authentication whenever possible; and be cautious of suspicious emails or messages that may be attempting to steal your credentials.

As the global sporting community comes together to celebrate the beauty of football, it's essential to remember that the World Cup is also a prime target for cybercriminals seeking to cash in on the global frenzy. By taking the necessary precautions and staying informed about the latest threats, you can help keep your streaming services secure and your sensitive information protected.