WEST SHORE ROYAL CANADIAN MOUNTED POLICE OPENS INVESTIGATIONS INTO CHILD EXPLOITATION CASES LINKED TO 764, AND HANDALA LEVERAGES ALLEGED FBI SURVEILLANCE ACCESS TO THREATEN WORLD CUP PARTICIPANTS

June 12-18, 2026 | Issue 23 - NORTHCOM Team

Michela Sereno, Julia Ruiz Redel, Dominic Perfetti, Sharon Preci, Matthew George, Noah Clarke, Aristide Devevey, Jacob Robison

Khushi Salian, Embedded Editor; Alessandro Portolano, Junior Editor; Clémence Van Damme, Senior Editor

       Social Media Network^[1]

Date: June 10, 2026

Location: West Shore, British Columbia Province, Canada

Parties involved: Canada; West Shore Royal Canadian Mounted Police (RCMP); law enforcement; online extremist network 764; 764 members; key actors within the network; victims; children; impressionable youth; affected youth; gaming and social media communities; digital platforms

The event: West Shore RCMP opened investigations into three cases of child exploitation linked to the network 764.^[2]

Analysis & Implications:

• The West Shore RCMP’s investigations into 764 will very likely encounter persistent challenges in identifying key actors within the network, highlighting the resilience of decentralized online exploitation networks despite continued law enforcement intervention. The group’s use of decentralized cells will very likely undermine the effectiveness of arrests and platform bans, enabling members to rapidly reestablish communication channels on alternative digital platforms. This operational adaptability will very likely preserve the group’s ability to groom and coerce children, allowing continued exploitation of victims as unwilling recruiters. 764’s resilient recruitment structure will likely reduce law enforcement strategic interventions to temporary setbacks on the network's operations.

• Investigations into 764’s exploitation of impressionable youth will likely highlight the long-term criminogenic effects of sustained psychological abuse, likely raising concerns about the emergence of prolonged cycles of violence among victims. The network's digital grooming practices will very likely intensify psychological manipulation and exposure to self-harm content during critical stages of development, negatively affecting victims’ long-term perceptions of acceptable behavior. Prolonged contact with violent content will likely desensitize affected youth to physical and psychological harm inflicted on others, normalizing harmful behavior among victims. Exposure to violence will likely increase the risk of delinquency, fueling cycles of victimization and radicalization within affected gaming and social media communities through social pressures that reward coercive conduct.

Date: June 12, 2026

Location: USA

Parties involved: USA; political authorities; Federal Bureau of Investigation (FBI); World Cup security stakeholders; World Cup leaders; World Cup participants; Iran-linked hacker group Handala; hacker group; hostile cyber groups; media

The event: Handala leveraged alleged access to FBI surveillance capabilities to issue threats against World Cup participants.^[3]

Analysis & Implications:

• Handala's proclamation will likely demonstrate how uncertainty can amplify perceptions of capabilities beyond demonstrated access, likely encouraging hostile cyber groups to employ similar tactics during future high-profile events. Public allegations of compromised security technologies will likely spread rapidly through media and online channels before investigations verify them, likely creating temporary information gaps that Handala can exploit to legitimize claims of unauthorized access to critical protected networks. Increased credibility of intrusion claims will likely increase uncertainty regarding the scope of Handala’s access to tournament security technologies, allowing the hacker group to project a level of capabilities disproportionate to the scale of the alleged compromise. Demonstrated success in effectiveness through unverified intrusions will likely encourage other hostile cyber groups to leverage ambiguity to inflate the impact of their operations, incentivizing them to rely on uncertainty as an operational objective rather than a byproduct.

• Handala's public claim will likely increase pressure on World Cup security stakeholders to demonstrate responsiveness to potential cyber threats, likely encouraging their decisions to reflect reputational concerns rather than the evolving threat landscape.  Alleged access to high-profile security systems will likely increase reputational concerns among World Cup leaders, likely increasing pressure from political authorities and World Cup stakeholders to prioritize the publicly identified threat regardless of their assessed likelihood. Accountability-driven threat prioritization will likely diminish the degree to which security planning reflects independently assessed risks, likely increasing the weight assigned to threats capable of generating public scrutiny relative to those assessed as more operationally significant. Reduced attention devoted to operationally significant threats will likely constrain efforts to adapt security preparations to evolving risks, likely increasing the probability that disruptive cyber incidents emerge from scenarios that authorities did not anticipate as priority concerns.

---

[1] Social Media Network, generated by a third party database (This image pixelation has been enhanced by a third-party.)

[2] Island RCMP investigating reports of violent online group targeting children and youth, CityNews Vancouver, June 2026,  https://vancouver.citynews.ca/2026/06/10/island-rcmp-target-groups/ 

[3] Iran-linked group claims hack of FBI drones, threatens World Cup, monitor says, CBS News, June 2026, https://www.cbsnews.com/news/iran-linked-group-hack-fbi-droWorldnes-world-cup/