Overview
- Handala Hack Team posted photos and documents Friday after claiming access to Kash Patel’s Gmail, with most items appearing to date from about 2010 to 2019.
- The FBI said the material was historical and contained no government information, and it reported mitigation steps and a $10 million reward for tips on the group.
- Researchers assess Handala as a public persona for Iranian intelligence units, and the group rebuilt its web presence after March 19 Justice Department domain seizures, even using a new domain registered that same day to host Patel’s files.
- The Justice Department has linked Handala to a destructive March 11 cyberattack on medical device maker Stryker, while the group also claimed data tied to Lockheed Martin employees that the company says has not affected its systems.
- Investigations are ongoing into how the account was accessed, and analysts say the cache likely came from an old account or backup using previously exposed logins, a tactic that puts officials’ personal accounts at risk even when agency systems are secure.