The Handala Hack Team, a hacking collective tied to Iran by Western researchers, says it broke into the personal email account of FBI director Kash Patel and published photos and documents from the inbox.

What was exposed

According to the group, the leak includes emails and images stretching back more than a decade. Reports cite travel and business messages, plus casual photos of Patel next to an antique convertible, with a cigar, and standing in front of a mirror holding a bottle of rum.

Who verified the claim

News organizations including Reuters and CNN reported the incident, citing unnamed security officials and people familiar with the matter. The FBI and the Department of Justice have not issued a public comment.

Who is the hacker group

The Handala Hack Team describes itself as a pro-Palestinian hacking vigilante group. Western researchers have linked the group to Iranian cyberintelligence activity. The group has taken credit for other operations, including a recent cyberattack on the medical device company Stryker.

Why they say they attacked

The collective framed its actions as retaliation for an attack on a children s school in Minab, in southern Iran, that killed more than 170 people, most of them schoolgirls. The group said the Stryker attack and other operations signal what it called the beginning of a new chapter in cyber warfare.

Context and controversy

Kash Patel became the ninth director of the Federal Bureau of Investigation in 2025. His tenure has been contentious. Critics say he has steered the agency to serve personal travel and political priorities tied to President Donald Trump.

  • Confirmation: Major outlets report the breach, but government agencies remain silent.
  • Content: Older emails and personal photos are among the posted material.
  • Motivation: The hackers say the action was retaliatory and politically driven.

This incident adds to a pattern of cyberattacks that target Western companies and officials amid rising tensions related to the US, Israel, and Iran. Observers will be watching for any official response and for signs of further intrusions aimed at economic or government targets.