Hackers believed to be connected to Iran have allegedly gained access to the personal email account of FBI Director Kash Patel, according to sources who spoke to CBS News on Friday.
In a statement, the FBI said it is aware of “malicious actors targeting” Patel’s personal email data and emphasized that appropriate measures have been taken to reduce any potential risks.
The bureau also clarified that the compromised material is older in nature and does not include any classified or government-related information.
Reuters was the first to report the incident, noting that the hacking group known as Handala Hack Team claimed responsibility and shared images online, including photos of Patel and what appears to be his résumé.
The breach comes shortly after the U.S. Justice Department seized four domains linked to the same group, as part of ongoing efforts to disrupt cyber operations and transnational repression activities tied to Iran’s Ministry of Intelligence.
Notably, the domain allegedly used in the attack on Patel was registered on March 19 — the same day authorities announced the seizure of the group’s domains.
The FBI also stated that the State Department is offering a $10 million reward for information that could help identify members of the Handala Hack Team.
According to the Justice Department, the group has been behind several cyberattacks, including a malware operation targeting a U.S.-based global medical technology company. In another case, it reportedly leaked sensitive data belonging to around 190 individuals associated with the Israeli military or government.
In an online message, the group appeared to confirm the breach of Patel’s email, referencing recent U.S. actions against them.
“We chose to respond in a way that will not be forgotten,” the group wrote.
They also claimed that Patel, as head of the FBI, is now among their hacking victims, asserting that the agency’s systems were breached within hours.
The post included images of Patel as well as a document believed to be his résumé, which listed his personal email address.
