FBI Director Kash Patel's email account has been hacked by a group linked to Iran, causing his private messages and photos to be published online, the agency has confirmed.
The group, known as the Handala Hack Team, has published a purported resume of Patel and several photos of him on its website, along with a statement saying: "This is just our beginning."
The statement also said: "If your director can be compromised so easily, what do you expect from employees at lower levels?" The FBI has clarified that the information obtained is "historical and does not include any government information."
This is not the first time Iranian-backed hackers have targeted Patel; he was also targeted in 2024, weeks before his appointment to the FBI.
The photos, which Handala claims to have taken from Patel's account, are circulating on social media with the group's logo as a watermark. They show Patel in unknown locations, standing next to a vintage convertible, smiling next to an airplane, smoking and sniffing cigarettes, taking selfies next to a bottle of alcohol, and posing in various restaurants and hotels.
The BBC has not independently verified the leaked documents. In its statement on the hack, the Handala group claims that “ the FBI’s so-called ‘impenetrable’ systems were brought to their knees within hours by our team.” “This is the security the US government prides itself on?! This is the cyber giant that thinks threats and bribery can silence the voice of resistance?!”
The FBI has announced that it is offering up to $10 million for information that helps identify members of the Handala group.
Recently, the U.S. Department of Justice seized several Handala domain names that were allegedly involved in hacking schemes linked to the Islamic Republic of Iran. The department said that Iran’s Ministry of Intelligence and Security (MOIS) had used Handala’s sites to spread “terrorist propaganda,” conduct “ psychological operations against regime opponents,” take credit for hacking activities, and seek the assassination of journalists and dissidents.
The Handala group said the hacking of Patel's account was retaliation for the FBI's seizure of his pages, as well as the $10 million reward the agency offered for information on similar cyberattacks.
Earlier this month, the Handala group claimed responsibility for a cyberattack on US medical technology company Stryker. The attack led to the destruction of data and the denial of employee access, with claims that more than 200,000 systems, servers and mobile devices were affected and 50 terabytes of critical data were stolen.
The group said the attack on the Stryker was “ revenge for the brutal attack” on an Iranian girls’ school early in the war, which left over 160 dead, as well as “ in response to ongoing cyberattacks against the infrastructure of Iran and its allies.”