WASHINGTON — Iran-linked hackers breached the personal Gmail account of FBI Director Kash Patel and published photographs and documents from it online, the FBI and Justice Department confirmed on Friday.
The group known as the Handala Hack Team claimed responsibility for the intrusion and posted materials including what appeared to be Patel’s resume, personal photos and correspondence, most of which dated from 2010 to 2019. A Justice Department official said the leaked items appeared authentic. The FBI stated that the breach involved only Patel’s personal email account and that no government systems or classified information were compromised.
The incident occurred amid the ongoing conflict between the United States, Israel and Iran that began with strikes on Iranian targets in late February. Iran has responded with missile and drone attacks on U.S. and allied positions, including a strike on Prince Sultan Air Base in Saudi Arabia on Friday that wounded at least 12 U.S. service members. The Handala Hack Team has carried out similar hack-and-leak operations against U.S. targets in recent weeks, describing them as retaliation for the military actions.
Patel, who became FBI director on Feb. 20, 2025, has been a prominent figure in the Trump administration. The hackers posted the materials on their website and stated that Patel would now join their list of successfully targeted victims. Cybersecurity experts have noted an increase in activity by Iran-linked groups targeting American officials and entities since the conflict escalated.
The breach highlights vulnerabilities in personal email accounts used by high-profile government officials. The FBI has advised agencies and personnel to strengthen personal cybersecurity practices amid heightened threats from Iranian-affiliated actors. The bureau has offered a $10 million reward for information leading to the identification of members of the Handala Hack Team, which has frequently targeted U.S. government officials.
As of Sunday, the Handala Hack Team had not released additional materials from the account. The FBI continued to investigate the breach while monitoring for further cyber activity linked to the conflict. Diplomatic and military developments in the Middle East, including restrictions on the Strait of Hormuz and recent Houthi missile launches from Yemen toward Israel, remained ongoing.
