Pro-Iranian Group Claims Breach of FBI Chief’s Personal Account

A pro-Iranian hacking group, Handala, has claimed responsibility for breaching the personal account of Kash Patel, the Director of the Federal Bureau of Investigation, and releasing what appear to be old personal records and photographs online.

In a message posted on Friday, the group asserted that Patel had joined its list of “successfully hacked victims” and shared several images, including casual photographs, along with a resume and other documents. It also claimed to have made emails and related files available for download. However, a closer look at the material suggests that much of it dates back more than a decade , largely covering personal travel and business-related records.

Importantly, there is no evidence of active misuse of the compromised account. There have been no reports of emails being sent, impersonation attempts, or any unusual activity such as posts or messages originating from the account following the alleged breach. The incident appears limited to the exposure of archived data rather than a real-time operational compromise.

Responding to the development, the FBI said it is aware of malicious actors targeting Patel’s personal email and has taken necessary steps to contain any potential risks. The agency emphasised that the information involved is “historical in nature” and does not include any classified or government data, ruling out immediate national security concerns.

The timeline of the breach remains unclear. However, earlier reports from December 2024 indicated that Patel had been alerted to being a target of an Iranian-linked cyber operation before his confirmation as FBI Director.

Handala is known for its pro-Iranian and pro-Palestinian stance and has previously claimed cyberattacks, including a recent disruption involving a US-based medical technology firm. The U.S. Department of Justice recently moved against such networks by seizing domains linked to Iranian hacking efforts, while the administration of Donald Trump has announced a reward of up to $10 million for information leading to the identification of the group’s members.

The incident is being viewed largely as a symbolic cyber intrusion aimed at exposure rather than disruption.