HANDALA’S breach of the FBI Director Kash Patel’s personal Gmail account made global headlines on 27 March 2026, with the hacktivist group claiming Patel “will now find his name among the list of successfully hacked victims” after releasing a sample of more than 300 emails along with personal photographs and a résumé. According to the FBI, the compromised data was historical in nature and involves no government information, with the majority of leaked emails dating from 2010 to 2019.
The attack appears to be retaliation, coming after the seizure of four Handala-domain names on 19 March 2026 and the U.S. government’s announcement of a $10 million reward for information leading to the group’s members. Handala is described in the piece as a state-backed Iranian actor operated by Iran’s Ministry of Intelligence and Security, known by aliases such as Void Manticore and Storm-0842.
The article frames the episode as part of a broader pattern of Iranian cyber activity, with Handala pursuing disruptive cyberattacks, data leaks and psychological operations.