Pro-Iranian Hackers Claim Breach of FBI Director Kash Patel's Personal Account

Hacking group posts years-old photos and documents from Patel's personal email account

Mar. 27, 2026 at 4:52pm

A pro-Iranian hacking group called Handala has claimed responsibility for breaching the personal email account of FBI Director Kash Patel. The group posted online what appear to be years-old photographs, a resume, and other personal documents from Patel's account.

Why it matters

The hack of a senior U.S. government official's personal account by a pro-Iranian hacking group raises concerns about cybersecurity threats from Iran and its proxy groups. It also highlights the vulnerability of high-profile individuals to targeted attacks, even on their personal digital accounts.

The details

According to the message posted by Handala, the group claimed to have successfully hacked an account belonging to Patel, the current head of the FBI. The group posted more than half a dozen photos of Patel, including some from over a decade ago, as well as a work resume and other personal documents that appeared to be from his past.

  • The hack claimed by Handala likely occurred sometime prior to the group's public announcement on March 27, 2026.
  • News reports from December 2024 indicated that Patel had been informed by the FBI that he was targeted as part of an Iranian hacking campaign.

The players

Handala

A pro-Iranian, pro-Palestinian hacking group that has claimed responsibility for disrupting systems at a Michigan-based medical technology company and other cyber attacks on behalf of Iran.

Kash Patel

The current Director of the FBI, who was previously targeted in an Iranian hacking campaign according to reports from 2024.

Got photos? Submit your photos here. ›

What’s next

The FBI is likely to investigate the breach of Patel's personal account and take steps to enhance cybersecurity measures for senior government officials. The Justice Department may also pursue further action against Handala and other Iranian-linked hacking groups.

The takeaway

This incident underscores the persistent threat of Iranian-backed cyber attacks targeting high-profile U.S. government figures, even on their personal digital accounts. It highlights the need for robust cybersecurity protocols and vigilance to protect sensitive information, even outside of official government systems.