Handala claims to have breached FBI director Kash Patel's computer and has since uploaded various photos of him.
Handala claims to have breached FBI director Kash Patel's computer and has since uploaded various photos of him.
Handala claims to have breached FBI director Kash Patel's computer and has since uploaded various photos of him.
Handala claims to have breached FBI director Kash Patel's computer and has since uploaded various photos of him.

Iran-linked Handala hacking group breaches FBI to obtain Kash Patel photos


Cody Combs
Add as a preferred source on Google
  • Play/Pause English
  • Play/Pause Arabic
Bookmark

Handala, an Iran-linked hacker group, has followed through on a threat to attack the US domestic intelligence service, the FBI, hacking director Kash Patel's personal email.

Handala had said on Thursday it would carry out such a cyber attack, warning on Telegram that an FBI breach would be "coming soon."

"Soon you will realise that the FBI's security was nothing more than a joke," the group wrote.

On Friday, it posted several apparent photos of Mr Patel and an old CV that seemed to be his.

In a statement, the FBI said it was aware of malicious entities looking to breach Mr Patel's digital assets.

"We have taken all necessary steps to mitigate potential risks associated with this activity," the statement read in part.

"The information in question is historical in nature and involves no government information," the FBI said, adding that the State Department is offering up to a $10 million reward for information leading to the identification of the Handala hackers.

The US Department of Justice did not respond to requests for comment but an official told Reuters the hacked material appeared to be genuine.

The Iran-linked hacker group, Handala, posted several photographs and what appears to be a CV of FBI director Kash Patel.
The Iran-linked hacker group, Handala, posted several photographs and what appears to be a CV of FBI director Kash Patel.

The Telegram account was deactivated or removed shortly after those posts, but a new account later emerged with another message.

Handala shared various photographs of Mr Patel, including some of him smoking a cigar.

The hack comes days after Handala claimed that US aerospace and defence company Lockheed Martin had been compromised.

"The manufacturer of the F-35, F-22, Thaad missile defence system and advanced electronic warfare systems could not even protect its own identity," the group said on Wednesday.

In a statement to The National, a Lockheed Martin representative did not confirm that its systems had been compromised.

"Lockheed Martin continues to carry out its mission-critical work in support of American and allied warfighters around the world," the statement read.

"We are aware of the reports and have policies and procedures in place to mitigate cyber threats to our business." It said that Lockheed Martin remained confident in its "multi-layered information systems".

Last week, the US Justice Department and FBI announced the seizure of several websites associated with Handala.

The filings related to the seizures also confirm that Handala was responsible for a recent cyber attack against Michigan-based medical technology company Stryker, which has more than 50,000 employees around the world.

The US alleges that Handala might also be responsible for cyber attacks on hospitals and medical services in Maryland.

“We took down four of their operation's pillars and we're not done,” said FBI director Kash Patel after the Justice Department announced the seizure of several Handala internet properties, adding that the US would “hunt down every actor behind these cowardly death threats and cyber attacks”.

Yet the seizures by the US government seem to have had little impact on the group.

“The seizure of our domains, propaganda bombardment, threats of assassination, and even the looming shadow of aerial bombardment are nothing more than the latest desperate attempts by the United States and its allies to silence the voice of Handala,” a recent post by the group on Telegram read.

Handala, an Iran-linked hacker group sent out this foreboding message on Thursday.
Handala, an Iran-linked hacker group sent out this foreboding message on Thursday.

Ever since US and Israeli air strikes on Iran started on February 28, cyber-security analysts have warned of an increase in potential cyber attacks from Tehran and groups seeking to take advantage of the situation.

Several months before the US and Israeli strikes, Microsoft's security division warned that Iran shows no sign of slowing its cyber attacks.

Meanwhile, according to internet monitor NetBlocks, as of Thursday Iran entered the 27th day of its self-imposed internet blackout that is affecting 99 per cent of the country.

"Rights monitors, independent media and the public are sidelined as access is granted only to those on a state-approved white list," NetBlocks said.

In August, FBI assistant director Brett Leatherman said a cyber attack from Iran affecting US technology systems, data and infrastructure would likely be considered an act of war.

Meanwhile, the war in Iran has left the ruling regime with little to lose, so cyber attacks against America and other countries may well increase.

“History has shown that neither bullets, nor bombs, nor assassinations have ever been able to stand against the will of nations and the voice of truth,” Handala's message on its Telegram channel read several weeks ago.

Updated: March 31, 2026, 5:04 AM