The Iran-linked hacktivist group Handala Hack Team claims to have breached FBI Director Kash Patel's personal email account and stolen confidential information including emails, documents, and personal files. The group posted photos of Patel and what appears to be an older version of his personal resume on their website, along with a zip file they claim contains additional stolen documents.
A Department of Justice source confirmed to Reuters that Patel's email had been breached, though the FBI has not officially responded to requests for comment. The breach would represent one of the most significant cyberattacks in the ongoing cyber conflict between the U.S., Israel, and Iran if verified. Axios has not independently verified the validity of the documents in the claimed zip file.
Handala claims the breach was retaliation for the FBI's recent operation to seize several of the hacker group's domains. The bureau took that action after Handala claimed responsibility for a cyberattack on U.S. medical technology company Stryker. The group wrote that they decided to respond to what they called the FBI's "ridiculous show" in announcing a $10 million reward for information on Handala members.
No specific patches or mitigation steps have been announced, as this appears to involve a personal email account rather than government systems. The FBI's domain seizure operation suggests law enforcement is actively pursuing technical countermeasures against the group's infrastructure.
Iran routinely uses proxy groups like Handala for cyber operations to create plausible deniability and make formal attribution more difficult for targeted entities. However, hacktivist groups are known to make exaggerated claims about the scale of their breaches and stolen information.