Iranian Hacking Group Leaks FBI Director’s Personal Photos Following Federal Takedown

WASHINGTON — A hacking group linked to Iran’s Ministry of Intelligence and Security (MOIS) released a cache of photographs and personal emails belonging to FBI Director Kash Patel on Friday morning, marking the latest escalation in a digital tit-for-tat between Tehran and U.S. law enforcement. The Justice Department confirmed the authenticity of the documents, which were reportedly stolen from Patel’s personal email account.

An FBI spokesperson characterized the leaked materials as "historical in nature," noting that the breach involved no sensitive government information. The agency stated it has already implemented "all necessary steps to mitigate potential risks" stemming from the incident. The leak, which includes mundane correspondence dating back to 2010 and 2019, was orchestrated by a group operating under the moniker "Handala."
In a lengthy blog post, Handala claimed the leak was direct retaliation for recent FBI operations that took down several of the group's websites and the announcement of a $10 million bounty for information leading to the identification of its members. The FBI reaffirmed on Friday that the reward remains active, emphasizing that this Iranian-backed cell has a long history of targeting U.S. government officials.

Federal authorities recently seized four domains used by the MOIS for operations dating back to 2022, including Justicehomeland[.]org and Handala-Hack[.]to. Despite these seizures, Handala quickly established new digital fronts and spent the week issuing threats against both U.S. and Israeli officials. Court documents filed by the FBI identify Handala as one of several aliases used by the MOIS to conduct hacking campaigns and "leak operations" targeting Western interests.
The group further claimed the breach was a response to the March 4 sinking of the Iranian Navy frigate IRIS Dena, which was torpedoed by a U.S. submarine in the Indian Ocean. This latest activity follows a string of aggressive cyber maneuvers by the group, including a recent attack on a Michigan-based medical device firm and the leaking of personal data belonging to Lockheed Martin employees. The breach comes amid reports from Israeli officials claiming that several key Iranian leaders behind Handala were recently killed in targeted airstrikes.