A pro-Iranian hacking group, known as Handala, has claimed responsibility for breaching a personal email account belonging to FBI Director Kash Patel. The group posted online photographs, a work resume, and other personal documents from the account, many of which appear to be over a decade old.
In a message announcing the hack, Handala stated, “Kash Patel, the current head of the FBI, who once saw his name displayed with pride on the agency’s headquarters, will now find his name among the list of successfully hacked victims.” The post included more than six photos of Patel, including images of him next to an antique sports car and holding a cigar. The group also offered emails and other documents for download, which reportedly relate to his personal travels and work from years past.
The FBI has not publicly commented, but an anonymous source familiar with the matter confirmed that Patel’s personal email account had indeed been compromised. It is unclear when the breach occurred, though reports from December 2024 indicated Patel had previously been targeted as part of Iranian-linked cyber activity.
Handala, a pro-Iranian and pro-Palestinian hacking group, has previously claimed responsibility for disrupting systems at Stryker, a Michigan-based medical technology company, earlier this month. The group said the attack was retaliation for alleged U.S. strikes that killed Iranian schoolchildren. Handala represents one of several proxy groups that conduct cyber operations on behalf of Iran.
Last week, the U.S. Department of Justice announced the seizure of four web domains tied to Iranian hacking campaigns, including those used to threaten dissidents, highlighting the ongoing concern about Iran-linked cyber threats.
This breach highlights the growing threat posed by state-linked cyber actors. Even high-profile officials like FBI Director Kash Patel are not immune to personal account compromises, emphasizing the need for robust cybersecurity practices at all levels.