FBI Director’s Personal Email Breached by Iran-Linked Hackers
Iran-linked hackers have compromised the personal email account of Kash Patel, the FBI’s director, and publicly released photographs and documents online, according to statements from both the hacker group and the bureau on Friday.
What Was Leaked
The hacker group Handala Hack Team announced the breach on their website, declaring that Patel “will now find his name among the list of successfully hacked victims.” The group released a collection of personal photographs depicting Patel in various casual moments—smoking cigars, riding in a vintage convertible, and taking selfies with a large bottle of rum.
Beyond the photographs, the hackers published over 300 sample emails that appear to span personal and professional correspondence dating from 2010 to 2019.
FBI’s Response
The FBI confirmed the attack in a statement from spokesperson Ben Williamson, who said: “We have taken all necessary steps to mitigate potential risks associated with this activity.” The bureau emphasized that the compromised data was “historical in nature and involves no government information.”
Who Is Behind the Attack?
While Handala Hack Team presents itself as a group of pro-Palestinian vigilante hackers, Western cybersecurity researchers believe it is one of several personas used by Iranian government cyberintelligence units.
The group has recently claimed responsibility for other high-profile breaches, including:
- The March 11 hack of Stryker, a Michigan-based medical devices and services provider, where they claimed to have deleted large amounts of company data
- The theft of personal data from dozens of Lockheed Martin employees stationed in the Middle East, announced on Thursday
In response, Lockheed Martin stated it was aware of the reports and maintains policies and procedures “to mitigate cyber threats to our business.”
Part of a Broader Strategy
Gil Messing, chief of staff at Israeli cybersecurity firm Check Point, characterized the attack as part of Iran’s strategy to embarrass US officials and “make them feel vulnerable.” He noted that Iran is “firing whatever they have” in response to recent geopolitical tensions.
This uptick in activity follows coordinated strikes against Iran by the US and Israel last month. After initially maintaining a low profile, Iran-linked hackers have increasingly publicized their cyber operations as the conflict continues.
A Pattern of Personal Email Breaches
Targeting senior officials’ personal email accounts is not uncommon in the cyber warfare landscape. Notable precedents include:
- The 2016 breach of John Podesta’s Gmail account, Hillary Clinton’s campaign chair, with data later published on WikiLeaks
- The 2015 hack of former CIA Director John Brennan’s AOL account by teenage hackers, resulting in leaked information about US intelligence officials
A US intelligence assessment reviewed on March 2 suggested that Iran and its proxies could respond to recent events with relatively unsophisticated, low-level hacks against US digital networks—consistent with the type of breach that occurred.
Additional Threats on the Horizon
Iran-linked hackers may possess additional compromised data. A group operating under the pseudonym “Robert” previously told Reuters it was considering releasing 100 gigabytes of data stolen from Susie Wiles, the White House’s chief of staff, and other figures close to Donald Trump. However, Reuters has not been able to verify this claim, and the group has not responded to inquiries in several months.