Cybercriminals are monetizing the World Cup by selling compromised streaming accounts, according to HUMAN Security’s Satori Threat Intelligence team. The research found more than 12 million stolen accounts tied to streaming services broadcasting World Cup matches, representing roughly $220 million in potential black-market sales. The report describes a rapid expansion of supply as demand rises, including a June 27 spike when threat actors released a record 802,000 accounts and generated an estimated $14.8 million in potential single-day revenue. It frames the activity as an event-driven abuse of subscription platforms and customer credentials. While not higher education-specific, the incident matters to universities because campus IT units increasingly rely on streaming and third-party digital services for course-related content, recruitment media, and student programming. It also underscores the importance of account security, phishing defenses, and credential-monitoring practices tied to vendor access. The risk extends beyond users: universities must consider how breaches propagate to authentication systems and how rapidly stolen credential markets can scale during major public events.