DOJ Confirms Breach of FBI Director Kash Patel’s Personal Email
Summary
The Justice Department confirmed Kash Patel’s personal email was breached and said documents appeared authentic. Handala published alleged photos and emails; the FBI said the material was historical, contained no government information, and steps were taken to mitigate
Key points
- The Justice Department confirmed Patel’s personal email was breached and said the documents appeared authentic.
- Handala published alleged personal photographs and emails, including mundane messages from 2010 and 2019.
- The FBI said the material was historical, contained no government information, and the agency had taken steps to mitigate potential risks.
- Handala claimed the leak was retaliation for U.S. actions against the group, including website seizures and a $10 million reward.
- The Justice Department seized four domains allegedly used by Iran’s Ministry of Intelligence and Security in operations dating back to 2022; Handala subsequently created new websites.
- FBI statements and court documents describe Handala as a group that has targeted U.S. officials and as one of several monikers used by Iran’s MOIS.
Article Details
- Victim Organization
- Kash Patel (personal email account)
- Incident Type
- Breach of a personal email account and publication of allegedly stolen photographs and emails
- Data Types Exposed
- Personal photographs
- Personal emails
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- No operational disruption was reported. The FBI said it took steps to mitigate potential risks and that the leaked material contained no government information.
- Ransom Or Extortion
- No ransom demand was reported. Handala claimed the leak was retaliation for recent U.S. actions and the reported sinking of IRIS Dena.
- Claim Status
- confirmed
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
| DOMAIN | handala-hack[.]to | Domain seized by the Justice Department and allegedly used by Iran’s MOIS in operations. |
| DOMAIN | handala-redwanted[.]to | Domain seized by the Justice Department and allegedly used by Iran’s MOIS in operations. |
| DOMAIN | justicehomeland[.]org | Domain seized by the Justice Department and allegedly used by Iran’s MOIS in operations. |
| DOMAIN | karmabelow80[.]org | Domain seized by the Justice Department and allegedly used by Iran’s MOIS in operations. |
People
Threat Actors
HandalaPublished alleged personal photographs and emails taken from Kash Patel’s personal email account and claimed the leak was retaliation. FBI court documents describe Handala as one of several monikers Iran’s MOIS has used for hacking campaigns and leak operations.Ministry of Intelligence and Security (MOIS)FBI court documents reportedly state that Iran’s MOIS has used Handala as one of several monikers for hacking campaigns and leak operations; domains seized by the Justice Department were allegedly used by MOIS.
Countries
IranAn Iran-linked hacking group called Handala published alleged personal photographs and emails taken from FBI Director Kash Patel’s personal email following U.S.IsraelIn court documents, the FBI said Handala was one of several monikers Iran’s MOIS has used over the years to conduct hacking campaigns, leak operations and other digital initiatives targeting Israel and the United States.United StatesAn Iran-linked hacking group called Handala published alleged personal photographs and emails taken from FBI Director Kash Patel’s personal email following U.S.