Kamal Ghorui
The FBI has officially acknowledged that Iranian-linked hackers targeted the personal email account of its director, Kash Patel, confirming the breach but moving quickly to downplay its significance. The breach was first reported by Reuters on Friday, March 27, with the Iran-linked hacker group Handala Hack Team claiming responsibility. The group posted extensive material on its website which included photos and other documents like his resume.“The FBI is aware of malicious actors targeting Director Patel’s personal email information, and we have taken all necessary steps to mitigate potential risks associated with this activity. The information in question is historical in nature and involves no government information,” an FBI spokesman said in a statement, as per NBCNews.
What Iran-backed published
The breach was first reported by Reuters on Friday, March 27, with the Iran-linked hacker group Handala Hack Team claiming responsibility. It is the same group that claimed the responsibility of hacking Stryker’s medical equipment. The group posted extensive material on its website, along with a message for the FBI director: Patel “will now find his name among the list of successfully hacked victims.”According to Reuters, the hackers published a collection of personal photographs of Patel, including images of him smoking and sniffing cigars, standing beside an antique convertible, and taking a mirror selfie while holding a large bottle of rum.A Justice Department official told Reuters that Patel’s email had indeed been breached and that the published material appeared authentic. According to a sample reviewed by Reuters, the data shows a mix of personal and work-related correspondence spanning from 2010 to 2019.The news agency noted that the personal Gmail address Handala claims to have accessed matches one linked to Patel in previous data breaches, according to records held by dark web intelligence firm District 4 Labs.
Who is behind the attack
Handala describes itself as a group of pro-Palestinian vigilante hackers, but Western cybersecurity researchers view the group as one of several public-facing identities used by Iranian government cyberintelligence units.On March 11, Handala claimed it had hacked Stryker, one of the largest medical device manufacturers in the United States, alleging it deleted a massive volume of company data and disrupting Stryker’s operations for close to a week.
