Overview
- Handala, a group tied by U.S. authorities to Iran’s intelligence services, claimed the hack and a Justice Department official confirmed Friday that Kash Patel’s personal email was breached with photos and documents posted online.
- The FBI said it had moved to reduce any risk and described the leaked content as historical with no government information, while the inquiry into how the account was accessed continues.
- Cybersecurity reviews of samples by outlets and firms such as Reuters and Check Point found the cache to be mostly emails and files from roughly 2010 to 2019, likely pulled from an old Gmail account or backups rather than an active inbox.
- The personal Gmail address matched one seen in prior data exposures tracked by dark‑web researchers, a common path attackers use to re‑target high‑profile figures with hack‑and‑leak campaigns.
- The disclosure followed March 19 domain seizures of Handala sites by the Justice Department and a State Department reward of up to $10 million for tips on the group, and Handala cast the leak as retaliation that fits a wider pattern of targeting officials’ personal accounts to embarrass them.