An Iran-linked hacking group has compromised the personal email account of Federal Bureau of Investigation director Kash Patel.

The breach came to light today. The hacking group, Handala Hack Team, gained access to photos and documents from the compromised account.

“The FBI is aware of malicious actors targeting Director Patel’s personal email information, and we have taken all necessary steps to mitigate potential risks associated with this activity,” the FBI said in a statement. “The information in question is historical in nature and involves no government information.”

The hackers have published some of the photos stolen from Patel’s account. They reportedly show Patel standing in a hotel, smiling next to a jet and photographing a bottle of rum. The compromised documents, in turn, are said to include the FBI director’s resume.

It’s unclear how the cyberattack unfolded. According to the BBC, one possibility is that hackers used information stolen during an earlier breach. A few months before Patel’s confirmation as FBI director, the agency reportedly notified him that “his communications had been targeted” by Iran-linked hackers.

CBS News reported that the cyberattack was carried out using a domain registered on March 19. The same day, the U.S. Justice Department announced that it had seized 4 other domains associated with Handala Hack Team. 

“Instead of targeting heavily defended FBI systems, attackers are taking the easy route by exploiting personal email systems that usually have weaker protection,” said Eric Stride, the Chief Security Officer of cybersecurity services company Huntress Inc. “Even when the data isn’t classified, the accumulation of stolen unclassified information, even from a personal account, can yield or imply sensitive details. These are the kinds of attacks that AI can accelerate.”

Last July, reports emerged that a threat actor had used artificial intelligence to impersonate U.S. State Secretary Marco Rubio. The hacker sent AI-generated voicemails that mimicked Rubio’s voice to multiple foreign government officials. The goal was reportedly to gain “access to information or accounts” associated with the targeted individuals.

Earlier in 2025, a bad actor compromised the phone of White House chief of staff Susie Wiles. The hacker used the device to impersonate Wiles and contact politicians.

The breach of Patel’s email account is the second cyberattack involving Handala Hack Team to have come to light this month. On March 11, the hacking group compromised the network of U.S. medical equipment manufacturer Stryker Corp. and deleted the data on thousands of Windows devices. The cyberattack disrupted the company’s business operations. 

On Thursday, Stryker disclosed that most of its production lines are back online. The company is reportedly still in the process of restoring its order processing systems. 

Photo: Wikimedia