Manchester United have confirmed that club captain Bruno Fernandes was the victim of a social media hack, with unauthorised posts appearing on his official X account criticising the club's co-owners.
Hack Targets Club Leadership After Defeat
The breach occurred on Sunday, 12th January 2026, just hours after United were eliminated from the FA Cup. A message reading "let's get rid of INEOS" was posted to Fernandes's verified profile, which boasts over 4.5 million followers. The post was viewed more than 84,000 times before being removed.
INEOS is the global chemicals company owned by British billionaire Sir Jim Ratcliffe, who holds a minority stake in Manchester United and oversees its football operations. The club's official X account swiftly moved to address the situation, confirming the hack and urging supporters not to engage with any of the posts or direct messages from the compromised account.
Turmoil On and Off the Pitch
The cyber incident compounds a difficult period for the club. The hack followed a 2-1 third-round FA Cup defeat at home to Brighton at Old Trafford. Goals from Brajan Gruda and former United striker Danny Welbeck sealed the victory for the visitors, extending United's winless run across all competitions to four matches.
Benjamin Sesko scored a late consolation for United, but the match ended on a sour note as 18-year-old academy graduate Shea Lacey was sent off after receiving two yellow cards in quick succession.
The team is also in a state of managerial flux. Former midfielder Darren Fletcher, the club's current under-18s head coach, was in temporary charge following the sacking of manager Ruben Amorim on 5th January. Fletcher oversaw a 2-2 draw with Burnley earlier in the week, but the loss to Brighton is likely his last match before a permanent appointment is made for the rest of the season. Ex-players Ole Gunnar Solskjaer and Michael Carrick are reported to be the leading candidates for the role.
Club Moves to Contain Fallout
United's statement was a clear attempt to control the narrative and distance their captain from the controversial post. By immediately labelling the account as compromised, the club aimed to prevent the message from being interpreted as a genuine criticism from the Portuguese international, who has been at the club since 2020.
The event highlights the cybersecurity risks facing high-profile athletes, where personal social media accounts can become targets for hackers seeking to cause disruption or spread misinformation, especially during times of sporting tension.
