Iran-backed hackers breach FBI director Kash Patel's personal emails

A group, known as the Handala Hack Team, shared Patel's purported resume and photos of him on its website on Friday along with a statement that says: "This is just our beginning."

The FBI said it was aware of "malicious actors" targeting Patel's email information. "The information in question is historical in nature and involves no government information."

The agency is offering up to $10m (£7.5m) for information that helps in identifying members of the Handala group.

Iranian-backed hackers were reported to have breached Patel's private communications in 2024, weeks before he was appointed to lead the FBI. It is not clear if that breach was different from the one claimed by the Handala group on Friday.

Photos Handala claims to have taken from Patel's email account have been circulating on social media with the group's logo added as a watermark.

The photos show Patel at various unidentified locations, including standing beside a vintage convertible, smiling next to a jet, smoking and sniffing cigars, taking a selfie next to a bottle of liquor, and posing in what appear to be restaurants and hotels.

"The emails look very old and that makes me believe that this is likely a compromise that occurred from other groups in another time period, and is recycled today," Kaiser, who has worked at the FBI's Criminal, Cyber, Response, and Services Branch, said.

In its statement announcing the hack, the Handala group said the "so-called 'impenetrable' systems of the FBI were brought to their knees within hours by our team. This is the security that the US government boasts about?! This is the cyber giant that thinks threats and bribes can silence the voice of resistance?!"

Experts say this kind of operation on a senior US government official may not take much sophistication to achieve.

"Personal accounts don't have the same level of protection and alerting as government systems, so these are often an attractive target for hackers," said Dave Schroeder, director of National Security Initiatives at the University of Wisconsin–Madison.

"Handala consistently tries to gain this type of access because it serves their interests to claim hacks of prominent people and organizations," Schroeder added.

Last week, the US justice department seized several Handala domain names it says were involved in hacking schemes linked to the Islamic Republic of Iran.

The department said Iran's Ministry of Intelligence and Security (MOIS) had been using the Handala websites to spread "terrorist propaganda," conduct "attempted psychological operations targeting adversaries of the regime", claim credit for hacking activity, and call for the killing of journalists and dissidents.

Handala said its hack into Patel's email account was retaliation for the FBI's seizure of its websites, as well as for the FBI offering a reward of $10m for information on similar malicious attacks.

Earlier in March, Handala group also claimed responsibility for the cyberattack of US medical technology firm Stryker.

The Stryker incident saw the company's employee login defaced with a message claiming data had been erased in a 'wiper' attack by the Iran-backed group of hacktivists.

In a post at the time on their now-suspended X account, Handala claimed it had wiped "over 200,000 systems, servers, and mobile devices" and extracted "50 terabytes of critical data" in the Stryker attack.

The group said the Stryker cyberattack was "in retaliation for the brutal attack" on an Iranian girls' school at the start of the war, which killed over 160 people, as well as "in response to ongoing cyber assaults against the infrastructure" of Iran and its allies.

Marco Rubio said US allies were open to helping escort ships through the Strait of Hormuz, which Iran has closed and threatened to charge fees for.

The late-night vote was a step towards bringing the 40-day partial shutdown - and long security lines at US airports - to an end.

Mexico's navy launches a rescue mission for ships delivering aid to Cuba, strained by food and fuel shortages amid a US embargo.

The Iran men's national football team wore black armbands and held schoolbags as their national anthem played before a match against Nigeria.

The helicopter, which was carrying one pilot and four passengers,crash-landed about 100 yards off a beach, officials say.