In brief
FBI Director Kash Patel's personal email account has been compromised by the Iran-backed Handala Hack Team, who have released purported personal information and photos online. The FBI is offering up to $10 million for information on the hackers as concerns grow over cyber security vulnerabilities. Experts suggest this breach might represent older data from previous attacks rather than a new threat.
FBI Director Kash Patel's personal email account has been hacked by an Iran-linked group, the agency has confirmed.
A group, known as the Handala Hack Team, shared Patel's purported resume and photos of him on its website on Friday along with a statement that says: This is just our beginning. The FBI stated it was aware of malicious actors targeting Patel's email information and reassured the public that the information in question was historical and involved no government data.
The agency is offering up to $10 million for information that leads to the identification of members of the Handala group.
Iranian-backed hackers had previously breached Patel's private communications in 2024, weeks before he was appointed to lead the FBI, but it is unclear if this recent breach is associated with that. Photos claimed by Handala to be taken from Patel's account have begun circulating on social media with the group's logo superimposed.
The images depict Patel in various settings, including beside a vintage convertible and near a private jet, raising questions about the legitimacy of the claims. The BBC has not independently verified the leaked documents.
Experts in cybersecurity suggest that the reports indicate a historical breach rather than a freshly executed hack. Cynthia Kaiser, from Halcyon Ransomware Research Center, explained that the leaked emails appear to be outdated, likely originating from different breaches.
The emails look very old and that makes me believe that this is likely a compromise that occurred from other groups in another time period, and is recycled today, Kaiser said.
The Handala group declared that they overcame the FBI's security systems in mere hours, mocking the agency's cybersecurity claims. Experts noted that personal accounts, unlike government systems, do not receive the same level of protective measures, making them attractive targets for hackers.
Last week, the US Justice Department seized several Handala domain names linked to hacking schemes, as the group used these platforms for spreading propaganda and claiming responsibility for hacking operations.
Handala's assault on Patel's email account appears to be retaliation against the FBI's actions taken against its web presence, as well as an answer to the reward offer for information leading to their arrest.
