Manchester, England – Manchester United were forced to issue an official warning to supporters on Sunday night, January 11, 2026, after club captain Bruno Fernandes' X account (formerly Twitter) was compromised by hackers. The breach occurred mere hours after the Red Devils suffered a humiliating 2-1 defeat to Brighton & Hove Albion in the Emirates FA Cup third round at Old Trafford, compounding a difficult day for the 13-time FA Cup winners.
The match itself marked a historic low for United, who exited the competition at the first hurdle for the first time since the 2013/14 season. Brighton took an early lead through Brajan Gruda in the 12th minute, assisted by former United striker Danny Welbeck, who later sealed the victory with a clinical finish in the 64th minute. A late consolation goal from substitute Benjamin Sesko was not enough to prevent the upset, leaving interim manager Darren Fletcher's side to reflect on another trophyless path in what has been a turbulent campaign.
Shortly after 11:00 PM local time, Fernandes' verified X account—with over 4.5 million followers—began posting a series of bizarre, uncharacteristic, and often provocative messages that quickly went viral. The first post read: "Join Macclesfield FC. Excited for the future," a seemingly mocking reference to sixth-tier National League North side Macclesfield, who had sensationally knocked out FA Cup holders Crystal Palace in the previous round on Saturday.
The hackers then escalated with a direct jab at United's co-owners, posting: “Let’s get rid of INEOS,” targeting the minority ownership group led by Sir Jim Ratcliffe, whose involvement has faced growing fan scrutiny amid the club's ongoing struggles. Additional posts included now-deleted references to launching a cryptocurrency with the caption “This is why I need to get paid more,” derogatory remarks toward female footballer Alisha Lehmann, and random tags directed at high-profile figures such as adult film star Bonnie Blue (with a suggestion to "collab"), YouTuber KSI, the England cricket team, and world darts champion Luke Littler. One challenge read: "1v1 fifa @LukeTheNuke180," while another bizarrely commented on a hypothetical Jake Paul vs. Anthony Joshua scenario.
The most viewed and controversial post featured a screenshot of Manchester United's infamous 7-0 thrashing by rivals Liverpool at Anfield in March 2023, a humiliating defeat that remains a sore point for fans. The erratic activity, which lasted over an hour, sparked confusion and concern among supporters, with many initially questioning whether the posts were legitimate before realizing the account had been hijacked.
Manchester United swiftly responded via their official X account, posting a clear statement: “Bruno Fernandes’s X account has been hacked. Supporters should not engage with any of the posts or direct messages.” The club urged fans to avoid interacting with the compromised profile to prevent further spread of misinformation or potential scams, such as phishing attempts via direct messages.
Reports indicate that the account has since been secured, with all unauthorized posts deleted. Manchester United has launched an internal investigation to determine how the hackers gained access, reviewing security protocols for high-profile players. The club is expected to provide further updates as the review progresses, though no timeline has been confirmed.
The incident highlights the growing vulnerability of athletes' social media accounts to cyberattacks, especially during periods of heightened scrutiny. Fernandes, 31, who played the full 90 minutes in the Brighton loss, has been a consistent performer and vocal leader for United since joining from Sporting CP in 2020. As captain, his influence extends beyond the pitch, making any unauthorized activity on his platforms particularly damaging.
This hack comes at a precarious time for Manchester United, who are navigating managerial uncertainty following the departure of their previous head coach and a string of disappointing results across competitions. The FA Cup exit follows an earlier elimination from the Carabao Cup, leaving the Premier League and potential European qualification as the remaining routes to silverware this season.
Fans reacted with a mix of amusement, frustration, and sympathy online, with many sharing screenshots of the rogue posts before they were removed. The timing—immediately after a shock cup defeat—amplified the embarrassment, as anti-INEOS sentiment among sections of the fanbase aligned eerily with one of the hacked messages.
As the club works to restore normalcy, the episode serves as a reminder of the intersection between on-field performance and digital security in modern football. Bruno Fernandes is expected to address the matter personally in due course, but for now, United has advised caution while emphasizing that the posts were not from the player himself.
