Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Email Security

FBI Confirms Kash Patel Email Hack as US Offers $10M Reward for Hackers

The agency said Iranian hackers targeted the director’s personal email account and noted that the compromised information is old.

Email hack

The FBI has confirmed that threat actors have gained access to an email account belonging to FBI Director Kash Patel, but said no government information has been compromised. 

The Iran-linked hacker group Handala on Friday claimed to have hacked Patel’s email account, releasing files allegedly representing photos, emails, and classified documents taken from the FBI director’s inbox.

“The so-called ‘impenetrable’ systems of the FBI were brought to their knees within hours by our team,” the hackers wrote. 

However, the account does not appear to be hosted on FBI systems; it is a personal Gmail account. In addition, the stolen information does not seem to be recent.

It’s unclear when the account was hacked, but it may have been one of the many targeted by Iranian hackers back in 2024 as part of an operation targeting Donald Trump’s presidential campaign. 

In a statement to the media the FBI said it’s aware of “malicious actors targeting Director Patel’s personal email information,” noting that steps have been taken to mitigate potential risks. 

Advertisement. Scroll to continue reading.

The agency also pointed out that the information stored in the hacked email account is “historical in nature and involves no government information”.

The Handala group claims to be an anti-Israel and anti-US hacktivist group, but is widely believed to be a persona used by the Iranian government to conduct cyberattacks and information operations.

The group recently caused significant disruptions to US medtech giant Stryker after hacking into its systems and wiping thousands of devices. However, some of their other claims are difficult to verify or seem exaggerated or false.

Handala’s claims that it hacked Patel’s email account came shortly after the FBI announced the seizure of several domains used by the group, and the US government officially stated that Handala operates under the direction of Iran’s Ministry of Intelligence and Security (MOIS).

The US has been offering up to $10 million for information on foreign hackers who target critical infrastructure, but on Friday the State Department specifically offered rewards for information on the Iranian threat groups Parsian Afzar Rayan Borna and Handala.

Related: Iranian Hackers Target Defense and Government Officials in Ongoing Campaign

Related: Impostor Uses AI to Impersonate Rubio and Contact Foreign and US Officials

Related: Chinese Spies Impersonated US Lawmaker to Deliver Malware to Trade Groups: Report

Written By

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.

Register

AI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.

Register

People on the Move

Stephen Garcia has been named Chief Information Security Officer at BreachRx.

Kasper Lindgaard has been appointed Vice President of Security Strategy at CoreView.

Chaim Mazal has been named Chief Information Security Officer at GitLab.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.