Hackers linked to the Iranian government accessed the personal email account of FBI Director Kash Patel, leaking a series of private photographs and documents. The U.S. Department of Justice and sources familiar with the incident have confirmed the authenticity of the extracted material, which is already circulating on various digital platforms as part of a retaliatory campaign coordinated from Tehran. Analysis of the stolen files reveals that the correspondence spans a period from 2011 to 2022. The leak includes details about travels, professional communications prior to his current position, and strictly personal matters, such as the search for an apartment and family photos. Yesterday, Handala published the names of multiple U.S. citizens working for Lockheed Martin in Israel. The FBI then seized the Handala domain. Today, in response, Handala published an old hacked Gmail account of Kash Patel with all sorts of personal emails, videos, and images. Cybersecurity researcher Ron Fabela pointed out that although the attackers present this as a breach of the agency's federal security systems, the intrusion occurred in Patel's private sphere and not on the FBI's official servers. According to statements from the hacker groups themselves, this cyberattack is a response to the joint bombings carried out by the United States and Israel against targets in Iranian territory over the last month. The dissemination of this sensitive material is part of a propaganda strategy aimed at demonstrating vulnerabilities in Washington's security leadership amid the current armed conflict in the Middle East. Furthermore, the attackers link their actions to a missile attack on a primary school in Iran that resulted in the deaths of 168 children, an incident that the Pentagon is investigating. This is not the first time the FBI director has faced this type of attack. At the end of 2024, weeks before his official appointment, authorities notified Patel of a previous breach of his communications. That campaign also affected other officials in Donald Trump's circle, such as Donald Trump Jr. and Todd Blanche. The group responsible for the recent leak had previously worked to block the operations of a U.S. medical device manufacturer earlier this month. The Department of Justice identifies these operatives as agents working for Iran's Ministry of Intelligence and Security. Despite U.S. government measures to seize websites used by these groups, cyberattacks persist.
