Forgot your password?
typodupeerror
Privacy Security

Iran-Linked Hackers Breach FBI Director's Personal Email (reuters.com) 82

An anonymous reader quotes a report from Reuters: Iran-linked hackers have broken into FBI Director Kash Patel's personal email inbox, publishing photographs of the director and other documents to the internet, the hackers and the bureau said on Friday. On their website, the hacker group Handala Hack Team said Patel "will now find his name among the list of successfully hacked victims." The hackers published a series of personal photographs of Patel sniffing and smoking cigars, riding in an antique convertible, and making a face while taking a picture of himself in the mirror with a large bottle of rum.

The FBI confirmed that Patel's emails had been targeted. In a statement, bureau spokesman Ben Williamson said, "we have taken all necessary steps to mitigate potential risks associated with this activity" and that the data involved was "historical in nature and involves no government information." Handala, which presents itself as a group of pro-Palestinian vigilante hackers, is considered by Western researchers to be one of several personas used by Iranian government cyberintelligence units. [...] Alongside the photographs of Patel, the hackers published a sample of more than 300 emails, which appear to show a mix of personal and work correspondence dating between 2010 and 2019.

Iran-Linked Hackers Breach FBI Director's Personal Email

Comments Filter:
  • by PPH ( 736903 ) on Friday March 27, 2026 @03:09PM (#66065004)

    Plz post more of those "deer in headlights" photos of Patel.

    • Plz post more of those "deer in headlights" photos of Patel.

      Is there any other kind? Every photo of him I've seen looks like the result of a poorly formed query processed by a janky LLM.

    • by shanen ( 462549 )

      Really? That's the only Funny on this rich target? And doesn't even strike me as especially funny. Maybe later?

      But now I can't even remember if the real FBI director's passing got a mention on today's Slashdot.

  • This guy... (Score:5, Insightful)

    by Midnight_Falcon ( 2432802 ) on Friday March 27, 2026 @03:22PM (#66065016)
    Quite possibly the most incompetent FBI director in history. He's been in office for a year...couldn't someone at the FBI have secured his digital footprint in that time? Oh wait, he fired many career agents with this type of expertise and Trump also neutered CISA. Perhaps he was too busy on "business" trips involving smashing down beers at the Olympics. Or sugar-daddying his girlfriend, who is young enough to be his daughter, and desperately trying to make her a country music star. Meanwhile, where is Nancy Guthrie? What about those people named in the Epstein files?
    • There have only been 8 others.

      Name one even close.

      I bet his password was something like KA$HRUL3Z.

  • by abulafia ( 7826 ) on Friday March 27, 2026 @03:24PM (#66065022)
    I feel like we're stuck in a time loop with a a really screwed up read head.

    I so, so very look forward to pissing on several graves. I'll happily be arrested in Arlington Cemetery, so long as they let me shake first.

  • Assuming it's remotely true (and there's good reason for thinking it isn't), it still means the FBI director was negligent in their choice of personal email provider, that the email provider had incompetent security, and that the government's failure to either have an Internet Czar (the post exists) or to enforce high standards on Internet services are a threat to the security of the nation (since we already know malware can cross airgaps through negligence, the DoD has been hit that way a few times). The FBI director could have copied unknown quantities of malware onto government machines through lax standards, any of which could have delivered classified information over the Internet (we know this because it has also happened to the DoD).

    In short, the existence of the hack is a minor concern relative to every single implication that hack has.

    • If the data is really that old, it sounds like they might've infiltrated a backup rather than the live account. Still a problem, but hopefully a little less so.

    • by Travco ( 1872216 )
      You can say that it might not be true but the justice department has already said that it is.
    • by ArchieBunker ( 132337 ) on Friday March 27, 2026 @03:57PM (#66065072)

      Assuming it's remotely true (and there's good reason for thinking it isn't), it

      The FBI confirmed it. Unless you're saying you can't trust the officials appointed by this administration?

    • by ls671 ( 1122017 ) on Friday March 27, 2026 @04:05PM (#66065100) Homepage

      All people I know who got their email hacked were on outlook. None on gmail nor any other provider. I am really curious about if he was on outlook or not. I suspect some hacked outlook email accounts have nothing to do with the user being negligent and has to do with microsoft cloud being full of security holes.

      I keep on blocking full /16 microsoft cloud networks from accessing my services while I only block single IPs from amazon and google cloud and get orders of magnitude less bad request from them then Microsoft. This leads me to suspect some vm instances running on microsoft cloud were hacked directly because of security holes in microsoft cloud itself, not because the owners of the vm instances were negligent.

      • Or much more likely, that the individual in question was reusing credentials across numerous sites. The email account was probably just fine but when your credentials get leaked elsewhere, this is what happens. Obviously no MFA setup either.

        Or possibly, he used a weak password that wasn't that hard to brute force. I doubt this person is a computer security professional or even a hobbyist. The 99% just doesn't understand basic computer security.

      • "All people I know who got their email hacked were on outlook. None on gmail nor any other provider."

        If you are not limiting to people you *personally* know, there was a pretty famous non-outlook case: https://en.wikipedia.org/wiki/... [wikipedia.org]

        If you *are* limiting to people you personally know, I would suggest you may not have a representative sample.

        • by ls671 ( 1122017 )

          That's why I said "I suspect" meaning it *might* be. I just shared what I have observed.

          The type of attacks I am talking about are similar to this one:
          https://en.wikipedia.org/wiki/... [wikipedia.org]

          The attackers exploited software or credentials from at least three U.S. firms: Microsoft, SolarWinds, and VMware

          You posted a link referencing a spear-phishing attack which has very little to do with where the email account was hosted and the entity providing the email service.

  • They may be able to find out his shoe size.
  • Was it, "12345" like my luggage?

  • Everybody already knew Patel is a dork. There'd be nothing to see even in his government email, because he's basically out to lunch and out of the loop.
  • The content of this "scandalous" data dump -- 10 years of emails -- is as exciting as my grand father's public Facebook page.

    Were I a hacker, I'd be embarrassed to release this.

Cobol programmers are down in the dumps.

Working...