Trending Now - Iran-linked Hackers Breach FBI Director Kash Patel's Emails

WHO:

The hackers are identified as the Handala Hack Team, which is believed to be linked to Iran’s Ministry of Intelligence and Security.

Ron Fabela, independent cybersecurity researcher, stated, "This isn’t an FBI compromise — it’s someone’s personal junk drawer."

FBI spokesperson Ben Williamson stated, "We have taken all necessary steps to mitigate potential risks associated with this activity," regarding the breach of Kash Patel's email.

The hackers, Handala Hack Team, claimed responsibility for the breach and published a sample of more than 300 emails.

Ron Fabela, independent cybersecurity researcher, stated, "This isn’t an FBI compromise — it’s someone’s personal junk drawer."

The hackers are identified as the Handala Hack Team, which is believed to be linked to the Iranian government.

The hackers published images of Kash Patel "sniffing and smoking cigars" and "making a face while taking a picture of himself in the mirror with a large bottle of rum."

The hacking group Handala is believed to be one of several aliases used by cyberintelligence units working for the Iranian government.

The hackers are identified as the Handala Hack Team, allegedly working for Iran’s Ministry of Intelligence and Security.

Ron Fabela, independent cybersecurity researcher, provided insights on the nature of the breach.

Kash Patel, FBI Director

Handala Hack Team, an Iran-linked hacker group

U.S. Department of Justice (DOJ)

Ron Fabela, independent cybersecurity researcher

WHAT:

The hackers published a series of personal photographs of Kash Patel, including images of him "sniffing and smoking cigars," riding in an antique convertible, and "making a face while taking a picture of himself in the mirror with a large bottle of rum."

The hackers claimed to have deleted a significant amount of data from Stryker, a medical devices company, during their cyberattack on March 11th, 2026.

The hackers published a sample of more than 300 emails, which appear to show a mix of personal and work correspondence dating between 2010 and 2019.

The hackers published photographs of Kash Patel "sniffing and smoking cigars," riding in an antique convertible, and making a face while taking a picture of himself in the mirror with a large bottle of rum.

The hackers claimed to have deleted a significant amount of data from Stryker, a medical devices company, during their cyberattack on March 11th, 2026.

The hackers published images of Kash Patel "sniffing and smoking cigars" and "making a face while taking a picture of himself in the mirror with a large bottle of rum."

The hackers claimed their actions were a response to a missile strike on an elementary school in Iran, which Iranian state media reported killed at least 168 children.

The hackers claimed responsibility for a cyber attack on Stryker, a medical devices company, earlier in March 2026.

The FBI is offering up to $10 million in rewards for more information about the hackers who targeted Patel's account.

The hackers claimed that the FBI's systems were "brought to their knees within hours" during the breach.

The DOJ's press release stated that the seized domains were involved in cyber attacks and "faketivist" psychological operations using data stolen via hacking.

Kash Patel stated, "We took down four of their operation's pillars and we're not done. This FBI will hunt down every actor behind these cowardly death threats and cyberattacks and will bring the full force of American law enforcement down on them."

The hackers published a series of photographs of Kash Patel from before he became FBI Director, claiming they were stolen from his personal email account.

The hackers also published Patel's purported resume online.

Ron Fabela, an independent cybersecurity researcher, described the breach as accessing "someone’s personal junk drawer" rather than a significant FBI compromise.

Handala Hack Team claimed responsibility for breaching Kash Patel's personal email account.

The hackers published materials including photographs and documents taken from Patel's email.

The stolen emails date from around 2011 to 2022 and include personal, business, and travel correspondence.

The DOJ confirmed that Patel's emails were compromised.

The hackers claimed that the FBI's systems were "brought to their knees within hours."

WHERE:

The breach involved Kash Patel's personal email account, which is associated with the FBI.

WHEN:

The breach was first reported by Reuters on March 27th, 2026.

The DOJ announced the seizure of four domains associated with Handala Hack Team just over a week prior to March 27th, 2026.

The breach was first reported by Reuters on March 27th, 2026.

The DOJ announced the seizure of domains used by Handala Hack Team just over a week prior to March 27th, 2026.

The breach was first reported by Reuters on March 27th, 2026.

The breach was reported on March 27th, 2026.

The DOJ announced the seizure of domains used by Handala Hack Team just over a week prior to March 27th, 2026.

A previous hack targeting Patel occurred in late 2024.

WHY:

The hackers claimed their actions were a response to a missile strike on an elementary school in Iran, which Iranian state media reported killed at least 168 children.

The hackers claimed their actions were part of a broader strategy to embarrass U.S. officials and "make them feel vulnerable."

The hackers claimed their actions were a response to a missile strike on an elementary school in Iran, which Iranian state media reported killed at least 168 children.

U.S. intelligence officials warned about potential retaliation from Tehran-linked hackers due to U.S. and Israeli bombing of Iran that began in February 2026.

The hackers claimed their actions were a response to a missile strike on an elementary school in Iran, which Iranian state media reported killed at least 168 children.

HOW:

The hackers published materials online as proof of the breach, including personal photographs and documents taken from Patel's email account.

TechCrunch confirmed that some of the emails stolen by Handala included a cryptographic signature linking them to Patel's account.

The DOJ announced the seizure of four domains associated with Handala Hack Team just over a week prior to March 27th, 2026, as part of an effort to disrupt Iranian hacking operations.

The Justice Department's press release stated that the seized domains were involved in cyber attacks and "faketivist" psychological operations using data stolen via hacking.

The breach involved accessing Patel's personal email account, which the hackers claimed was part of a broader effort to target incoming Trump officials.

The DOJ seized four domains associated with Handala Hack Team to disrupt their operations.

(UPDATED March 28, 2026 11:03 UTC)

The Handala Hack Team, believed to be linked to Iran’s Ministry of Intelligence and Security, has published a series of personal photographs of Kash Patel, including images of him enjoying cigars and riding in an antique convertible. This group also claimed responsibility for a cyberattack on Stryker, a medical devices company, during which they deleted significant data and released over 300 emails from Patel's account, showing a mix of personal and work correspondence. Their actions were reportedly in response to a missile strike on an elementary school in Iran that, according to state media, resulted in the tragic deaths of at least 168 children.

(UPDATED March 28, 2026 07:15 UTC)

The FBI has confirmed a breach of Kash Patel's email, with spokesperson Ben Williamson stating that all necessary steps have been taken to mitigate potential risks. The Handala Hack Team has claimed responsibility for the breach, publishing over 300 emails along with personal photographs of Patel, including images of him smoking cigars and riding in an antique convertible. They also asserted that they deleted a significant amount of data from Stryker, a medical devices company, during their cyberattack on March 11, and claimed their actions were intended to embarrass U.S. officials.

(UPDATED March 28, 2026 01:21 UTC)

On March 27, 2026, Reuters reported a significant breach involving the Handala Hack Team, which is believed to have ties to the Iranian government, as independent cybersecurity researcher Ron Fabela described the incident as "someone's personal junk drawer" rather than an FBI compromise. The hackers published images of Kash Patel engaging in questionable behavior, claiming their actions were in retaliation for a missile strike in Iran that reportedly killed at least 168 children. Additionally, TechCrunch confirmed that some of the stolen emails contained a cryptographic signature linking them directly to Patel's account, and just over a week prior, the Department of Justice announced the seizure of domains used by the Handala Hack Team.

(UPDATED March 27, 2026 23:05 UTC)

The hacking group Handala, believed to be linked to Iranian cyberintelligence units, has claimed responsibility for a recent cyber attack on Stryker, a medical devices company. In a surprising turn, they published images of Kash Patel, including one of him taking a selfie with a large bottle of rum. The FBI is now offering up to $10 million in rewards for information about the hackers, with TechCrunch confirming that some stolen emails contained a cryptographic signature connecting them to Patel's account.

(UPDATED March 27, 2026 21:08 UTC)

The Handala Hack Team, allegedly linked to Iran’s Ministry of Intelligence and Security, has claimed responsibility for a significant breach of the FBI's systems, asserting they brought the agency "to its knees within hours." The Department of Justice recently announced the seizure of four domains tied to these hackers, who stated their actions were a retaliation for a missile strike in Iran that reportedly killed at least 168 children. Kash Patel emphasized that the FBI is committed to pursuing every individual involved in these cyberattacks and threats, highlighting the agency's determination to respond with the full force of American law enforcement.

(UPDATED March 27, 2026 19:17 UTC)

On March 27, 2026, hackers published a series of photographs and a purported resume of Kash Patel, claiming they were stolen from his personal email account. Ron Fabela, an independent cybersecurity researcher, characterized the breach as accessing "someone’s personal junk drawer" rather than a significant compromise of the FBI. The hackers stated their actions were a response to a missile strike on an elementary school in Iran that reportedly killed at least 168 children, while the Justice Department noted that the seized domains were involved in cyber attacks and psychological operations using stolen data.

(UPDATED March 27, 2026 17:16 UTC)

Kash Patel, the FBI Director, has had his personal email account breached by the Handala Hack Team, an Iran-linked hacker group. The hackers published a trove of materials, including photographs and documents, taken from Patel's emails, which span from 2011 to 2022 and cover personal, business, and travel correspondence. The U.S. Department of Justice has confirmed the compromise of Patel's emails and noted that the hackers claimed they brought the FBI's systems "to their knees within hours." This breach comes shortly after the DOJ seized four domains associated with the Handala Hack Team, and it follows warnings from U.S. intelligence officials about potential retaliation from Iranian-linked hackers in response to recent U.S. and Israeli military actions. The hackers stated their actions were a direct response to a missile strike in Iran that reportedly killed at least 168 children, as reported by Iranian state media.