In late February 2026, the FBI's Los Angeles field office distributed a bulletin to California law enforcement agencies warning that Iran had aspired to conduct a surprise drone attack using unmanned aerial vehicles launched from an unidentified vessel off the West Coast. The advisory landed just as the United States and Israel launched coordinated military strikes against Iran — thrusting an unverified intelligence tip into the center of a rapidly escalating conflict and triggering one of the largest domestic security mobilizations in recent memory.
The bulletin, first reported publicly by ABC News on March 11, immediately generated heated debate. The White House pushed back forcefully on the coverage, calling the intelligence unverified and the reporting misleading. Security experts, however, cautioned that the warning — regardless of its verification status — reflected a genuine and evolving threat landscape in which Iranian asymmetric capabilities, drone technology, and pre-positioned networks could converge to reach American soil.
What the FBI Bulletin Said
The FBI advisory, distributed by its Los Angeles field office at the end of February 2026, carried a law-enforcement-sensitive classification. According to the full text later confirmed by FBI Assistant Director for Public Affairs Ben Williamson, the bulletin stated that the Bureau had recently acquired "unverified information" indicating that as of early February 2026, Iran had aspired to carry out a surprise attack using unmanned aerial vehicles from an offshore vessel positioned near the U.S. coast, specifically targeting unspecified locations in California, in the event that the United States launched military strikes against Iran.
The advisory also stated that there was no additional intelligence on the timing, methodology, specific target, or perpetrators of the alleged plan. The word "unverified" in the opening line became a significant point of contention. ABC News initially published the bulletin without including that qualifier, prompting a correction and an editor's note. The FBI's Williamson later confirmed that the word had been present in the original document distributed to law enforcement.
"This post and story should be immediately retracted by ABC News for providing false information to intentionally alarm the American people." — Karoline Leavitt, White House Press Secretary, responding on social media
Leavitt described the advisory as one email about a single unverified tip sent to local law enforcement in California. President Trump, when asked about the alert, told reporters that the matter was being investigated but added that he was not concerned about Iranian strikes on American soil. CBS News, citing multiple law enforcement and intelligence officials, reported that the bulletin was based on an apparent tip that surfaced before the current conflict began, and that there was no credible intelligence underpinning an operational threat. A California-based federal law enforcement official told CBS News directly that the intelligence was "not actionable."
Intelligence bulletins from the FBI and DHS are routine communications sent to state and local law enforcement to share threat information. The inclusion of unverified tips is standard practice — the purpose is to ensure agencies at all levels maintain situational awareness, not to confirm the existence of an imminent plot.
The Threat Environment Behind the Warning
The FBI bulletin did not emerge in a vacuum. On February 28, 2026, the United States and Israel launched coordinated military strikes against Iran — designated by the Pentagon as Operation Epic Fury — after negotiations over Iran's nuclear program collapsed. The strikes targeted military infrastructure, nuclear facilities, and key leadership positions. Iranian state television confirmed that Supreme Leader Ayatollah Ali Khamenei was killed in Tehran during the initial wave of attacks. His son, Mojtaba Khamenei, was subsequently selected as his successor.
The killing of Khamenei triggered an immediate and multi-layered retaliatory response. Iran launched missile and drone attacks against Israel, U.S. military bases in Kuwait, Qatar, the United Arab Emirates, and Bahrain, and struck at Gulf Arab nations hosting American forces. Six American service members were killed in the opening hours of the conflict by an Iranian drone at Shuaiba port in Kuwait. The U.S. consulate parking lot in Dubai was struck by a drone, confirmed by Secretary of State Marco Rubio.
Alongside the military escalation, a parallel ideological mobilization began. The Department of Homeland Security issued a "Critical Incident Note" to law enforcement agencies warning that two senior Iranian religious leaders — Grand Ayatollah Naser Makarem Shirazi and Ayatollah Nouri Hamedani — had issued separate Farsi-language fatwas declaring that avenging Khamenei's death was a religious obligation for Muslims worldwide. The DHS note further cited a decree from the Islamic Revolutionary Guard Corps (IRGC) stating that "the enemy will no longer have security anywhere in the world, even in their own homes."
"We know Iran has an extensive presence in Mexico and South America, they have the drones and now they have the incentive to conduct attacks." — John Cohen, former DHS Intelligence Chief, via ABC News
The Shahed Factor: Iran's Drone Arsenal
The specific weapon system at the heart of the FBI warning — unmanned aerial vehicles launched from an offshore platform — is not a hypothetical capability for Iran. The Shahed-136, often described as "the poor man's cruise missile," has become one of the defining weapons of modern asymmetric warfare. Produced by Iran's state-owned HESA corporation in partnership with Shahed Aviation Industries, the drone has been deployed extensively in the Russo-Ukrainian war (where Russia calls it the Geran-2) and is now a primary tool in Iran's retaliatory campaign across the Middle East.
The Shahed-136 has a reported operational range of up to 2,500 kilometers (roughly 1,550 miles) and carries an explosive warhead weighing between 30 and 50 kilograms, according to multiple defense assessments including data from the Center for Strategic and International Studies (CSIS) and the U.S. Army's ODIN database. It flies at low altitudes using GPS and GLONASS satellite navigation to reach pre-programmed coordinates, making it difficult for conventional radar systems to detect until it is relatively close to its target. Each unit costs an estimated $20,000 to $50,000 to produce — a fraction of the cost of the missiles required to intercept it.
The portability of the launch system is a critical factor. The drone and its rail-mounted launch frame can be assembled and deployed from the cargo hold of a commercial truck or, as the FBI bulletin suggested, from a vessel at sea. Iranian military media have previously showcased Shahed-136 drones being launched from mobile truck platforms. Military expert Francis Tusa told The National newspaper that a single engineer, given the necessary components, could assemble roughly 12 drones in a 10-hour shift, noting that production requires nothing more than a simple workspace.
The U.S. military has taken the Shahed threat seriously enough to reverse-engineer it. In December 2025, the Pentagon unveiled the LUCAS (Low-Cost Uncrewed Combat Attack System), a drone modeled directly on the Shahed-136 and produced by SpektreWorks. The LUCAS was first used in combat during the opening hours of Operation Epic Fury. According to the U.S. Undersecretary of Defense for Research and Engineering, the LUCAS has a flight range of 434 nautical miles and costs between $10,000 and $55,000 per unit.
Iran's Western Hemisphere Footprint
The FBI's warning about a potential attack on the American homeland was not predicated solely on Iran's ability to produce drones. It also rested on an intelligence community assessment of Iran's longstanding operational presence in the Western Hemisphere. The IRGC's Quds Force and Hezbollah have maintained financial, logistical, and intelligence networks across Latin America for decades, with documented operations in Venezuela, the Tri-Border Area of Argentina, Brazil, and Paraguay, and direct contact with Mexican transnational criminal organizations.
A 2011 case brought by U.S. prosecutors revealed that an IRGC-linked operative attempted to recruit members of a Mexican drug cartel to assassinate the Saudi ambassador in Washington, D.C. The recruited individuals turned out to be DEA informants. In June 2022, Argentine authorities detained a Venezuelan cargo plane previously owned by Mahan Air, an Iranian airline with documented ties to the Quds Force, after it flew through Mexico, Paraguay, and Uruguay with a crew that included individuals linked to the IRGC.
The Countering Iran in the Western Hemisphere Act of 2012, signed into law by President Obama, codified congressional recognition that Iran was using the IRGC, the Quds Force, and Hezbollah as instruments of state policy across Latin America. Congressional testimony from that era documented Hezbollah supporters who had been arrested in the United States after crossing the U.S.-Mexico border, an active Hezbollah cell discovered in Charlotte, North Carolina, in 2002, and IRGC operatives caught conducting pre-operational surveillance in New York City.
"The most important goal of Hezbollah was to get to the American and Mexican border." — Walid Phares, foreign policy analyst, via Iran International
U.S. intelligence officials have also grown concerned about the expanding use of drones by Mexican drug cartels. The FBI bulletin obtained by ABC News referenced an uncorroborated report suggesting that unidentified cartel leaders had authorized drone-based attacks against American forces and personnel near the southern border. The convergence of cartel drone capabilities, Iranian expertise, and pre-existing relationships between these networks represents an intelligence concern that extends beyond any single unverified tip.
California's Response and the Oscars Security Surge
The bulletin's public disclosure on March 11 coincided with preparations for the 98th Academy Awards, scheduled for Sunday, March 16, at the Dolby Theatre in Hollywood. The result was one of the largest security operations ever mounted for an entertainment event on American soil.
Governor Gavin Newsom addressed the threat at a press conference on March 12, stating that drone-related concerns were already a focus and that the state had activated its emergency operations center at the start of the conflict. Diana Crofts-Pelayo, a spokesperson for the Governor's office, stated that California had elevated its security posture since hostilities began and was receiving regular security updates from federal partners. Newsom emphasized that there was no imminent threat at that time.
For the Oscars specifically, the LAPD deployed what sources described as a one-mile security perimeter around the Dolby Theatre, complete with surveillance drones, rooftop sniper positions, AI-powered monitoring systems, and a command center at an undisclosed location using software that analyzed everything from camera feeds to social media in real time. LAPD Commander Randy Goddard, the incident commander for the Oscars, told KABC-TV that although there was no intelligence suggesting the ceremony or Los Angeles was being targeted, the department had prepared for scenarios it had not addressed in prior years.
The Los Angeles County Sheriff's Department issued a statement noting that in light of global events, the department had increased patrols around places of worship, cultural institutions, and prominent locations, and referenced attention to "lone-actor attacks, sleeper cells, and advanced technological or cyber-related threats." Oscars executive producer Raj Kapoor told reporters that the production team was collaborating closely with the FBI and LAPD, emphasizing their commitment to ensuring attendee safety.
"There's what we usually do, and now we've cranked it up to 11." — Source involved with Oscars event security, via Deadline
The Cyber Dimension
The physical threat was not the only concern raised in the intelligence community's recent disclosures. The same DHS Critical Incident Note that warned of fatwas also flagged a surge in claimed cyberattacks by Iranian-affiliated actors. The bulletin listed multiple public claims of responsibility by Iranian-linked hackers targeting Israeli and allied nations' cyber infrastructure. While characterizing those claims as unverified, DHS advised organizations to remain vigilant and monitor for potential threat actor activity.
In a separate notice to U.S. defense contractors, the FBI and National Security Agency warned that Iranian-affiliated cyber actors could target American devices and networks for near-term cyber operations. Companies with business ties to Israeli research and defense firms were assessed as being at elevated risk. A regional fusion center bulletin also warned that Iran-aligned actors could conduct website defacements, denial-of-service attacks, data-wiping malware deployment, ransomware-style extortion, and attempted disruption of industrial control systems — all tactics consistent with Iran's documented cyber playbook.
A CSIS report published on February 26, before the strikes began, had warned that Iran could turn to cyberattacks as a form of horizontal escalation. The report's author, fellow Benjamin Jensen, noted that Iran had a documented history of substituting cyber operations for proxy warfare and terrorism, and could use covert operatives, proxy forces, and terrorist networks to target U.S. interests abroad and at home.
Organizations in sectors identified as potential Iranian cyber targets — including energy, water, transportation, defense contracting, and financial services — should review their incident response plans, ensure systems are patched against known vulnerabilities, audit administrative access credentials, and monitor for anomalous network activity. The FBI and CISA continue to publish updated indicators of compromise related to Iranian threat actors.
Key Takeaways
- The intelligence was unverified, but the threat landscape is real: The FBI bulletin was based on an unconfirmed tip acquired before hostilities began. No U.S. official has identified a credible, actionable plot against California. However, Iran possesses both the drone technology and the pre-positioned networks in the Western Hemisphere that would be required to attempt such an operation.
- Asymmetric warfare is the core concern: As former DHS intelligence chief John Cohen and ABC News national security contributor Elizabeth Neumann have emphasized, Iran cannot compete with the U.S. in a conventional military contest. Its strategic doctrine relies on proxy forces, low-cost drone swarms, cyber operations, and potentially pre-positioned assets to project force at a distance and at minimal cost.
- Drone defense is now a homeland security issue: The Shahed-136 and its variants have proven their effectiveness in Ukraine and across the Gulf. With ranges exceeding 2,000 kilometers, low-altitude flight profiles, and production costs measured in the tens of thousands of dollars, these systems represent a category of threat that the U.S. homeland security apparatus has only recently begun to address at scale.
- Cyber and physical threats are converging: DHS and FBI disclosures indicate that Iranian retaliation is not limited to kinetic action. The combination of fatwas calling for global vengeance, active cyber campaigns against allied infrastructure, and intelligence about drone aspirations reflects a multi-domain threat environment that demands coordinated physical and digital defenses.
The FBI bulletin about a potential Iranian drone attack on California has become a flashpoint in the national conversation about homeland security during wartime. Whether the underlying intelligence ever reflected a feasible operational plan remains unclear. What is clear is that the disclosure exposed genuine gaps in public awareness about Iran's drone capabilities, its asymmetric warfare doctrine, and the proximity of its proxy networks to the American homeland. As the conflict continues to unfold, the boundary between overseas military operations and domestic security has never been thinner.