Since U.S. strikes on Iranian radar sites and Iran's retaliatory ballistic missile launches at Kuwait and Bahrain bases earlier this week, the security calculus for the World Cup — already the largest single sporting event ever hosted on American soil — has gotten measurably harder.

The Scale Is Staggering

The 2026 World Cup spans 16 host cities across the United States, Canada, and Mexico, with the bulk of matches on American soil. According to AP News, the scale creates a significant security challenge under any circumstances.

The FBI and DHS have both outlined their security strategies publicly. But outlining a strategy and executing it during an active armed conflict with Iran — which has already demonstrated willingness to strike U.S. military installations with ballistic missiles — are two very different things.

The U.S. is hosting 5 million international visitors at dozens of venues across the country while simultaneously fighting a shooting war in the Persian Gulf.

What the FBI and DHS Actually Said

The sources here are thin on specifics — both AP News articles failed to load their full content, which tells you something about how much detailed public disclosure is actually happening. What we do know from AP's framing is that the FBI and DHS have described their World Cup security approach as a coordinated multi-agency effort.

This is standard language. Every big event gets the same boilerplate.

The threat environment, however, is not standard. Iran has state-sponsored proxy networks operating in Latin America and, according to prior U.S. intelligence assessments, inside the United States. Hezbollah has documented operational cells in the Western Hemisphere. Those facts don't disappear because there's a soccer tournament happening.

The War Changes the Math

The U.S.-Iran conflict that began in late February has now passed the four-month mark. Iran has absorbed significant military damage but has NOT been neutralized as a threat actor. A fragile ceasefire is being tested — AP News itself noted "a new exchange of fire with Iran in the Gulf tests the fragile ceasefire" as a current headline.

A fragile ceasefire plus World Cup creates a genuine, non-hypothetical security problem.

Iran's retaliation options against a U.S. military it cannot defeat directly include soft-target attacks and proxy operations. A packed stadium of 80,000 people in New York, Dallas, or Los Angeles is the definition of a soft target. Security officials know this. The question is whether the public does.

What Mainstream Media Is Getting Wrong

Sports media is covering the World Cup security angle almost entirely through the lens of fan experience — bag checks, metal detectors, traffic. But that's the wrong frame.

Left-leaning outlets are emphasizing the diplomatic framing without drilling into the specific new risks created by an active armed conflict. Right-leaning outlets have been largely silent on the World Cup security angle altogether, preferring to focus on the military operations themselves.

Both are leaving a gap. Nobody is directly connecting the dots between Iran's ballistic missile launches this week and what that means for U.S. venues hosting 80,000 people per match.

The Federal Apparatus Question

The FBI has undergone significant personnel and structural changes under the current administration. The same AP News homepage that mentions the World Cup security story also notes "FBI fires several analysts tied to disputed 'Catholic ideology' memo."

The FBI's domestic intelligence capacity has been in flux. A security agency mid-reorganization is not at peak operational efficiency. That's a management reality.

DHS has similar institutional disruptions over the past two years. Asking these agencies to execute the most complex domestic security operation in American history — during a war — while absorbing personnel changes is a serious undertaking.

What Needs to Happen

Congress needs to be asking specific questions publicly: What is the current threat assessment for World Cup venues as of this week? Has the Iran exchange this week changed the threat posture? What is the specific protocol if a credible attack warning is received mid-tournament?

Those answers shouldn't wait until something happens.

The World Cup is an economic and cultural opportunity. The May jobs report already showed the effect is real — construction, hospitality, and transportation jobs have materially benefited from preparations. That's a win worth protecting.

But protection requires honesty about the threat environment.

Five million visitors. Sixteen cities. An active war with a state sponsor of terrorism. The FBI and DHS need to be more than adequate here. They need to be exceptional.

The question is whether they will be.