FBI’s Director Kash Patel’s personal email account has been compromised by a group described as Iran-linked, according to confirmation from the Federal Bureau of Investigation.
The group, Handala Hack Team, claimed responsibility and published alleged materials from Patel’s account, including a purported resume and personal photos, alongside a warning message: “This is just our beginning.”
The FBI acknowledged that “malicious actors” had targeted Patel’s email but stressed that the compromised material was “historical in nature” and did not involve government information. Authorities are offering a reward of up to $10 million for information that could help identify members of the group.
Reports indicate that some of the leaked content dates back several years, with cybersecurity experts suggesting the breach may not be recent. Cynthia Kaiser, a senior vice president at the Halcyon Ransomware Research Center, said: “The emails look very old and that makes me believe that this is likely a compromise that occurred from other groups in another time period, and is recycled today.”
Images allegedly taken from the account have circulated online, showing Patel in various personal settings, though their authenticity has not been independently verified.
Experts note that personal email accounts are often more vulnerable than official systems. Dave Schroeder of the University of Wisconsin–Madison said: “Personal accounts don’t have the same level of protection and alerting as government systems, so these are often an attractive target for hackers.”
US authorities have also linked the group to broader cyber activities associated with Iran. The United States Department of Justice recently seized several domains allegedly used by the group, accusing it of spreading propaganda and conducting cyber operations.
Handala said the attack on Patel was retaliation for those actions, as well as for the FBI’s reward offer tied to similar cyber incidents. The group has previously claimed responsibility for other cyberattacks, including one targeting medical technology firm Stryker, as tensions between the US and Iran continue to extend into the cyber domain.