Iran-linked hackers claim breach of FBI director's personal email

https://www.reuters.com/world/us/iran-linked-hackers-claim-breach-of-fbi-directors-personal-email-doj-official-2026-03-27/

Comments

fmajidMar 27, 2026, 6:18 PM
GMail, like Apple, has specific enhanced security programs available for Politically Exposed Persons:

https://landing.google.com/intl/en_in/advancedprotection/

The fact the Director of the FBI did not avail himself of this just reiterates how incompetent he is, in addition to being corrupt as heck.

billforMar 27, 2026, 7:14 PM
Read the article he wasn't the director of the FBI: "The stolen emails appear to date from around 2011 to 2022"
hughwMar 27, 2026, 7:17 PM
He's had over a year to enable it.
kevin_thibedeauMar 27, 2026, 6:31 PM
It's possible it was breached in 2022 and they've held on to it until now.
ab_testingMar 27, 2026, 7:19 PM
Was that landing page written by Google India team !
connorgurneyMar 27, 2026, 7:21 PM
Not sure what difference the nationality of the copywriters makes…
bedatadrivenMar 27, 2026, 7:36 PM
Uh yeah, the locale in the link is specifically an Indian locale. If you find it it disorienting you can change en_in to en_us:

https://landing.google.com/intl/en_us/advancedprotection/

thaumasiotesMar 27, 2026, 7:34 PM
Well, it was written to target Indian English. You can find the American version of the page at https://landing.google.com/intl/en_us/advancedprotection/ .
BetelbuddyMar 27, 2026, 6:45 PM
It would be poetic justice to get the unredacted Epstein files via Iran...
everdriveMar 27, 2026, 2:47 PM
Interesting, and not all that implausible. The real test: his personal email should be pretty uninteresting except for stuff like HIPAA, amazon purchases, communications with friends / family. (good for HUMINT) But other than that, there shouldn't be anything in there which should make the news. It'll be interesting to see whether or not that bears out.

If they wanted to maintain access, they certainly wouldn't celebrate it publicly, which is why I assume they want to release information. But, there shouldn't be anything damning to release. ie, there ought not to be if the director is acting professionally. We'll see how the facts bear out. I also suppose it's possible they're just going for any win they can and there's nothing interesting here whatsoever, or it's a really boring secondary address or something.

throwaway27448Mar 27, 2026, 3:12 PM
I think this is actually the opposite of the correct conclusion—just look how influential Patreus cheating on his wife was (https://en.wikipedia.org/wiki/Petraeus_scandal). I seriously doubt that Kash Patel doesn't have a bunch of skeletons to dust off and show the world; the man is a weirdo (much like the rest of the administration).

EDIT: I actually misread the comment; I think we're likely in agreement. My bad.

JareMar 27, 2026, 3:24 PM
I don't know, these days skeletons seem to be treated as funny decoration and we're in a permanent state of Halloween.
redanddeadMar 27, 2026, 4:47 PM
Sullying Halloween's good name
_fat_santaMar 27, 2026, 4:09 PM
I was just reading a X thread that published some of the more notable things and overall it's pretty innocuous. The most "controversial" thing thus far is he took a trip to Cuba
nixon_why69Mar 27, 2026, 4:00 PM
I'd like to chime in and say that that Kash Patel, while completely unprofessional and incompetent, is way less of a weirdo than the rest of the administration.

His scandals are all about shirking job responsibilities to party and sightsee. That's not great from the FBI director but its way more normal than the rest of them.

mikeyouseMar 27, 2026, 4:08 PM
That's not remotely true of his history.. he's a full on Jan-6er, deep into Q-Anon, he was involved in numerous serious scandals during the first Trump admin (Nunes Memo / Russiagate 'parallel' investigation: https://www.theatlantic.com/politics/archive/2018/01/the-men...), he has a number of sketchy moneymaking side-businesses, he was formerly living with a GOP megadonor 'Timeshare Tycoon' as roommates in Vegas (https://thenevadaindependent.com/article/trump-fbi-pick-kash...), he collected enemies' lists for Trump which resulted in firing of most of the Iran counterintel team right before we started launching attacks because they had the termerity to investigate why Trump was showing donors top-secret maps of Iran after he left office..
quantifiedMar 27, 2026, 5:49 PM
In the current environment, those are more expecteds than scandalous. Insider trades around government activities, same-sex behavior, overt racism for example might nudge the needle.
nixon_why69Mar 27, 2026, 4:44 PM
I'm not defending or advocating for the guy, just saying, if you're gonna be a piece of shit, he seems more relatable than the rest of them.
embedding-shapeMar 27, 2026, 4:06 PM
I dunno, a sitting FBI director testifying under oath about details that are clearly false, goes above and way beyond "to party and sightsee". At least in my world it puts him up there together with the rest of the weirdos.
nickburnsMar 27, 2026, 4:02 PM
So you mean to point out that the sitting FBI director is a bro's bro.
close04Mar 27, 2026, 3:45 PM
> look how influential Patreus cheating on his wife was

Those times have passed. I'll restate what I said in a comment some days ago:

>> 50 years ago the press was "impeaching" presidents. Today presidents are "impeaching" the press

The current strategy is "keep the outrage hose on full blast and eventually people get desensitized". It works.

mc32Mar 27, 2026, 4:14 PM
The press was stupid. They were doing stupid gotchas like swiftboats, fake reports on GWB (Dan Rather), but couldn’t care less about things like the CIA and the crack cocaine connection[1], or lots of other things the government gets away with (including Clappers total information awareness unconstitutional surveillance efforts) The press is always carrying water for someone but that someone is rarely the public unless is just pure coincidence.

[1] there was one reporter who dared but the toll from the story resulted in his suicide, some years later. His colleagues poo-pooed his reporting on the connection.

treebeard901Mar 27, 2026, 3:43 PM
Maybe the hackers will release information connecting Patel to the Noem and Lewandowski grift operations with govt contracts. Out of the four companies allowed to bid for the $220 million advertising contract, 3 were linked to Noem and Lewandowski and one to Patel.

Im sure they are all doing it...

MyHonestOpinonMar 27, 2026, 3:48 PM
Well, if the president sets the example. What can you expect from the rest ?
hypeateiMar 27, 2026, 3:22 PM
There is so much corruption and impropriety in this administration that skeletons don't matter anymore. Looking at what sunk officials in previous administrations provides a sense for just how far gone we are, but it's not an indicator of what future consequences will be.
LoughlaMar 27, 2026, 6:27 PM
Dan Quayle lost a serious bid because he couldn't spell potato.

Now look at where we're at. It really is wild. Right, wrong, or indifferent. How far we've shifted is absolutely wild.

stronglikedanMar 27, 2026, 3:29 PM
[flagged]
thejazzmanMar 27, 2026, 3:35 PM
Trump is currently in office ;)
snapcasterMar 27, 2026, 3:37 PM
This simping is such a bad look. Why go to bat for a man who wouldn't piss on you to put out a fire? Act like a man jesus christ
tencentshillMar 27, 2026, 2:52 PM
Surely we are currently clean on OPSEC. There couldn't be any precedent for government officials using private email servers for confidential information!
vessenesMar 27, 2026, 3:35 PM
obligatory - that first famous private server was done because someone wanted a blackberry like Obama had, and was told no by NSA. Man that BB keyboard was good.
bookofjoeMar 27, 2026, 4:09 PM
Check this out (can't wait til mine arrives): https://www.clicks.tech/
connorgurneyMar 27, 2026, 7:26 PM
I’ve been using a Clicks case since the early days and have personally loved every second of it but it’s definitely an acquired taste. Let us know how you find it.
rurpMar 27, 2026, 3:44 PM
Are we talking about the same FBI director here? Professional and competent are not how I would describe Kash Patel. Given his overt buffoonishness and the whole administration's disdain for procedure and expertise I would be shocked if he didn't have extremely inappropriate content in his inbox.
conceptionMar 27, 2026, 3:49 PM
I believe “if” is doing a tremendous amount of work in parent’s comment.
firefaxMar 27, 2026, 3:38 PM
>his personal email should be pretty uninteresting except for stuff like HIPAA

medical diagnoses can be incredibly useful in understanding past and future actions

>there shouldn't be anything damning to release. ie, there ought not to be if the director is acting professionally

that "if" is doing some heavy lifting given who we are discussing

embedding-shapeMar 27, 2026, 2:58 PM
> his personal email should be pretty uninteresting except for stuff like HIPAA, amazon purchases, communications with friends / family. (good for HUMINT) But other than that, there shouldn't be anything in there which should make the news. It'll be interesting to see whether or not that bears out.

Aren't these the same people who apparently used Signal with a journalist in the chat, and had military conversations in that very chat?

Color me surprised if these people haven't heard of opsec before, and mix their work/personal life all over the place.

drnick1Mar 27, 2026, 3:41 PM
> Aren't these the same people who apparently used Signal with a journalist in the chat, and had military conversations in that very chat?

Signal is one of the most secure communication platforms out there, but it is obviously not immune to human error or social engineering.

mikeyouseMar 27, 2026, 4:10 PM
Also wildly illegal to use to conduct government business, especially confidential government business. (and yes the messages were auto-deleting and largely lost before anyone chimes in with technically they could be archived!)
nickburnsMar 27, 2026, 4:11 PM
It was a custom (presumably DoD-approved) build. And the story gets much better than that:

https://youtu.be/KFYyfrTIPQY&t=724

embedding-shapeMar 27, 2026, 4:08 PM
Ok? Signal is not the topic of my comment really, nor has anyone claimed it's less secure than other chat apps.
everdriveMar 27, 2026, 3:01 PM
Yes, and I wouldn't be shocked if there was classified information in there. I struggled with wording, but what I meant was "you're not supposed to be able to find classified or sensitive information in personal email, but I who knows what will be the case here."
dmixMar 27, 2026, 3:20 PM
Signal started being used during the Biden administration, the issue was how they were managing contacts which could be added to groups. They weren't carefully vetting access and a journalist with the same name as another military guy was added to the group by accident.
apical_dendriteMar 27, 2026, 4:04 PM
Source?
dmixMar 27, 2026, 4:20 PM
The public record of a contract to the Israeli company which handled archiving Signal chats for the DoD was done during Biden admin. And it's been well reported if you just Google it:

> Alexa Henning, spokesperson for the Office of the Director of National Intelligence, tweeted last week that “widespread use” of Signal began under the Biden administration, adding that “at ODNI, when I got my phone, it was pre-installed.”

https://www.politico.com/news/2025/04/02/inside-the-hazy-fra...

apical_dendriteMar 27, 2026, 5:57 PM
You're missing some key distinctions. The issues are: 1) putting classified information into a non-classified system; 2) putting information that needs to be preserved under laws like the presidential records act into systems where it's set to be auto-deleted. Both are illegal. Simply saying that the Biden administration pre-installed Signal is irrelevant. There are legitimate uses.

Your own article makes this exact point: > Matthew Shoemaker, a former Defense Intelligence Agency analyst who left the agency in 2021, said that while Signal was used during his time in government, “it was almost exclusively restricted to scheduling purposes,” such as letting their boss know that they’ll be late to work because of personal circumstances. “That’s why Signalgate is all the more staggering — because these senior leaders were doing the exact opposite of what even my most junior intelligence officers knew not to do,” he said.

You're doing bullshit partisan whataboutism. "well the democrats did it first".

This has nothing to do with adding the wrong contacts. It has to do with putting highly-sensitive material into Signal to circumvent the law around records preservation and as a result creating a situation where it's possible to accidentally add the wrong contact and therefore exposing that information to a journalist.

throwa356262Mar 27, 2026, 3:08 PM

    'Aren't these the same people who apparently used Signal with a journalist...'

Are people still believing that story? That leak was 110% intentional, just look at the language used during their conversation.

The whole thing looked like a digital version of a stage whisper.

embedding-shapeMar 27, 2026, 3:12 PM
> The investigation has led to turmoil within the Defense Department, raising tensions and the firings and resignations of several top DoD officials, including former Chief of Staff Joe Kasper. [...] On May 1, 2025, it was revealed that both national security adviser Mike Waltz and his deputy Alex Wong would be leaving their posts in the National Security Council

Let me guess, the "leak" was intentional just to break a bunch of laws and to cause a bunch of people to get fired and leave their posts?

apercuMar 27, 2026, 4:05 PM
They do a lot of mental heavy lifting to support a corrupt and incompetent administration- sunk cost fallacy I imagine.
Forgeties79Mar 27, 2026, 4:07 PM
The facts simply do not bear this interpretation out. Investigations and heads rolling for a stage whisper? Nah
bitwankMar 27, 2026, 4:09 PM
Yeah, the fact they announced it proves it’s nothing. I saw a picture of him smoking a cigar. We’ve already seen him drinking beer and acting foolish; probably enough to get you executed in Isfahan, but a giant nothining in the USA.
JeremyNTMar 27, 2026, 4:01 PM
> The real test: his personal email should be pretty uninteresting except for stuff like HIPAA, amazon purchases, communications with friends / family. (good for HUMINT) But other than that, there shouldn't be anything in there which should make the news.

I have no idea why this would be the default assumption for somebody as sloppy and erratic as Patel. Look at how many people were emailing damning stuff to/from Epstein's personal email accounts from their own personal email accounts!

BigTTYGothGFMar 27, 2026, 3:37 PM
Those "should"s are doing a lot of heavy lifting.
lanevichMar 27, 2026, 3:40 PM
[dead]
nullable_boolMar 27, 2026, 5:04 PM
Gone are the days of the strong silent type running the roles of high power in the government. He is a real embarrassment and I feel sorry for his mother.
BigTTYGothGFMar 27, 2026, 6:39 PM
> Gone are the days of the strong silent type running the roles of high power in the government

What, like J.Edgar?

snovymgodymMar 27, 2026, 6:01 PM
> I feel sorry for his mother.

In all likelihood his upbringing is what made him this way.

acuozzoMar 27, 2026, 7:29 PM
You think so? Peers, in my experience, have an even greater impact, especially between the ages of 10 and 25.
TheGRSMar 27, 2026, 6:23 PM
Gone only because current leadership kicked them all to the curb and told them to get out of Washington. Only loyal talking heads are wanted there now.
paxysMar 27, 2026, 6:09 PM
The strong silent types were all fired for being "woke". We collectively decided that incompetence should be the top qualification for all positions of power, and the results are obvious.
paxysMar 27, 2026, 5:48 PM
I feel like sending phishing emails for penis enlargement pills would take down half the current administration.
penguin_boozeMar 27, 2026, 6:13 PM
I know someone who will be interested in bigger hands--big beautiful hands.
Muhammad523Mar 27, 2026, 6:23 PM
I must say, i'd prefer if my hands remained the same size they are now. I dont want to lose my dexterity. Slightly offtopic
disantlorMar 27, 2026, 6:04 PM
worth a try
paxysMar 27, 2026, 3:31 PM
A couple of DOGE teenagers were able to casually walk in and steal the entire country's social security and healthcare data (and probably more), and we were cheering them on. There is still no accountability, and it has probably already been sold to the highest bidder. So this would be the least surprising thing in the world.
WololoooMar 27, 2026, 4:10 PM
We? I don't think I've seen anyone but the people absolutely not understanding the gravity of the situation were cheering on. And I'm not even American.
quantifiedMar 27, 2026, 8:24 PM
"We" is such an imprecise word for a pool of people. I believe Chinese has two flavors, "zanmen" including the listener too, and "women" excluding the listener. Obviously "we" did not elect Trump, only "a majority of the US voters who voted", and even the others may sadly use "we" though they didn't, because they are members of the political body that did. Just like the "they" of Israel that harass Palestinians and throw up West Bank settlements do not reflect all of Israel, and the average Soviet citizen did not reflect the behavior of the Soviet government.
drstewartMar 27, 2026, 4:01 PM
That sure is a lot of probablies for those accusations.

But anyway it doesn't matter since all that information was probably sold by the previous administration's son, who probably funded a lot of drug parties with the money.

magicalistMar 27, 2026, 4:16 PM
I don't know if this is an irony thing I'm not getting, but we know they had untracked access to data they shouldn't have (violating data access rules and orders from a judge), and there is a whistleblower accusation that the data was retained and some DOGE staffers were at least talking with other groups who could use the data.

Meanwhile how would Hunter Biden, not a government employee nor having access to government systems, get that data in the first place?

drstewartMar 27, 2026, 6:17 PM
Hunter Biden was accused of many crimes too. He probably got access from his dad.
GudMar 27, 2026, 7:34 PM
“Probably” sources please. We know for a fact that unvetted jerks(“big balls” and so on) had access thanks to Donald Trump.
firefaxMar 27, 2026, 3:42 PM
Allow me to put on my tinfoil hat for a moment and propose that maybe DOGE did loudly what the Solarwinds paired with OPM breach did quietly years prior.
fn-moteMar 27, 2026, 4:24 PM
OPM was much more serious. Equifax had already leaked the social security data and more.
mplanchardMar 27, 2026, 4:56 PM
FlamingMoeMar 27, 2026, 5:12 PM
Interesting comment: "if Iran ends up responsible for regime change in the US, i will be overjoyed as i die from irony"
pogueMar 27, 2026, 6:53 PM
Anybody dug through it yet?
smrtinsertMar 27, 2026, 5:17 PM
Is it legal to download something like this?
paxysMar 27, 2026, 5:44 PM
Legal or illegal doesn't really matter. If the regime wants to come for you they will.
fluidcruftMar 27, 2026, 6:03 PM
You can't prove you didn't (and the fuzz will produce evidence you did).
Muhammad523Mar 27, 2026, 6:42 PM
I dont know. I think downloading it with Tor would make it almost impossible to find out you downloaded this stuff anyway.
kaliqtMar 27, 2026, 7:20 PM
Legality matters now least of all to either side.
macNchzMar 27, 2026, 3:22 PM
I've been wondering if we'd see a cyber campaign emerge in this conflict. To my knowledge Iran seems to have pretty advanced cyber capabilities and increasingly fewer reasons to hold back. Gloves-off cyber war doesn't sound good to me. The US CISA already been cut back, has lost "virtually all of its top officials"^, doesn't have a permanent director, and is operating at a further reduced capacity because of the DHS shutdown.

^ https://www.cybersecuritydive.com/news/cisa-senior-official-...

mandeepjMar 27, 2026, 3:35 PM
> To my knowledge Iran seems to have pretty advanced cyber capabilities and increasingly fewer reasons to hold back.

Iran isn’t alone!! They are a quad along with China, Russia, and North Korea.

Painsawman123Mar 27, 2026, 3:47 PM
that's the thing that people overlook the most in regards to this war.iran isn’t doing this on its own. Russia, China and north korea have been backing it from the start. they’re the ones helping with intel on US base locations across the Middle East, supplying drones, and working out strategies to drag things into a stalemate, plus whatever else iran needs along the way
epolanskiMar 27, 2026, 4:00 PM
Can you blame them? Iran is fighting for its own survival and has to find help where it can.

If the US had an educated administration not composed by lap dogs they would've known that attacking Iran was going to be a terrible idea.

Saddam did the same mistake in 1980.

He thought that the Iranian Kurds, the political opponents, the Iranian Arabs, civilians were going to raise against the regime.

None of this happened. None. In fact, hundreds of thousands of people, even kids, rallied around the banner. There are documented stories of 13 year olds, jumping on barbed wire to use their bodies as bridges for infantry. Disgusting, yet telling of the fact that the Persians will do everything to defend their land even if they don't like its leadership.

It's very difficult to convince people you're bombing left that you're helping them get rid of a regime (which, you never know for sure how popular or unpopular it is).

Iranians, yet again, are rallying around the flag for what is effectively a foreign aggression.

kstenerudMar 27, 2026, 4:11 PM
Iran has been preparing for this war for 40 years. So has Israel. They will engage in a battle of supremacy over the Middle East. Both want the USA knocked out so that the Americans can't use their influence there anymore (both consider the USA a nuisance).

As soon as ground troops land in Iran, it's over for the USA. As it is, oil and goods shipping via the Persian Gulf and the Red Sea will be controlled by Iran for a very long time to come. All Iran has to do is withstand the pummeling, which it very likely will do. And they'll get plenty of support from China, since this plays into the South China Seas plan quite nicely as the USA moves carrier after carrier out of Asia.

40fourMar 27, 2026, 5:27 PM
The thing getting overlooked is all of the recent moves by Trump all lead back to China. Venezuela, Cuba, now Iran. These are all tentacles of China. The aggression against these 3 countries is not a coincidence. It’s a concerted and indirect attack on China in an attempt to weaken their subsidiaries. In the eyes of this administration, this is unpleasant, but necessary housekeeping that should have been done decades ago but no one was willing to spend the political capital to do it.

In Iran, Trump was clearly hoping (and verbally requested) the same thing you say about Sadam. I think we actually do know how unpopular the regime is, the mass protests demonstrated that. But the religious hardliners are the ones with the guns. And they clearly aren’t afraid to use them. So while there was some momentum, after everyone got gunned down in the streets by the IRGC it quickly deflated. So asking unarmed protesters to step up again is kind of big ask, without any material support.

chirauMar 27, 2026, 6:20 PM
Iranian protesters were not calling for US interference. Let's be very clear about that. They were doing it for their own regime change, not some US imposition. What they think of the US or whether they are for this war or supposed regime change by the US is a totally different consideration.
limagnoliaMar 27, 2026, 4:46 PM
Russia and North Korea are obviously doing so, but I haven't seen any direct evidence that China is providing intelligence support to Iran, do you have any links? It is certainly plausible, China would love to see Russia tied up in Ukraine and the US tied up in Iran.
40fourMar 27, 2026, 3:49 PM
I forget all the details but a hacker group associated with Iran already hacked the infrastructure of a major US health care tech company
derwikiMar 27, 2026, 3:53 PM
Stryker. FWIW a friend in ER medicine said it had very very limited effect.
40fourMar 27, 2026, 5:06 PM
That’s right thanks. The same Hacker group as this story. Yeah I didn’t hear much after the initial breach so I assumed it was minor.

Edit: apparently 80000 employee workstations got remotely wiped. So not so I guess I wouldn’t call that minor.

Also that’s what I get for commenting before reading the story, they mention the Styker incident in the story lol

mattbisMar 27, 2026, 3:48 PM
I really want to know how they did it.. was it some terrible password?

He doesn't strike me as the kinda person even using a local password manager; like keepass.

Somebody needs to find this out.

I doubt it was gmail support... surely it could not be via his phone sim, and if he didn't have two factor on; That would be so funny.

I'm tempted to check out the dark web or the telegram, but i'd rather not do either of those things.

dansoMar 27, 2026, 3:59 PM
I too am very curious about this. Even if his password was exposed and he didn’t have 2-factor auth, doesn’t Google by default ask for confirmation — e.g. texting a number or backup email associated with the account — when seeing an unrecognized device? Maybe he didn’t have any alt contact methods associated with his account?

(which might not be that unusual, he’s old enough to have opened a gmail account upon launch, before extra info hoops were put in place, and maybe he never touched his account config in the past 2 decades?

mattbisMar 27, 2026, 4:02 PM
You are probably right... I tend to change my password semi often. It's always a super complex impossible to remember string - and always keep an eye on the account activity.

Not to mention ; you would assume he should have more than one device linked to the account and then that adds another layer, since Google will ask you " is this you trying to logon ". <-- that is the only way to get Google to do the unrecognized flow you mention.

If you are suggesting it was exposed and he didn't immediately randomise all his passwords.. WORDS FAIL ME

It's all security 101 the irony is immense...

if the US government / FBI need someone to give some talks on how to do security ...

ffsm8Mar 27, 2026, 4:21 PM
Changing a password that's randomly generated is security theatre. It doesn't meaningfully improve security

Also it's entirely possible they only compromised a honeypot.

Considering their track record, that's actually more likely tbh

mattbisMar 27, 2026, 4:24 PM
Honeypot sure I didn't think of that.. But I was under the impression the FBI confirmed it ? So we can rule it out.

Making the password impossible to guess - how could that not be?

Since then you know you have a breach, as its randomised gibberish, if you then get the 2nd device asking " is this you trying to login " you can definitely know you are compromised....

I can't see your logic here, that isn't " theatre " ????

If you think that is theatre what is better then? Words and numbers.. easily brute forced.. Sorry can't agree.

ffsm8Mar 27, 2026, 4:42 PM
Why would they willingly destroy their successful honeypot if the other party announced they've access to it?

I haven't seen what's in it either though, but I would not rule it out yet, especially when the FBI is involved - which love those tactics

When you're compromised, changing the password is obviously not theatre - but changing a password which is randomly generated with enough entropy is what's pointless theatre. A secure password is secure, esp. If you're already using a password manager then the act of changing isn't meaningfully increasing your security (unless you're aware that your password was compromised) because the way to compromise it is what...? Having a keylogger on a device you logged in on? Then the changed password will be just as compromised

mattbisMar 27, 2026, 5:01 PM
That's why keepass is really useful since you aren't ever typing in the password.. its generated and then copied to the clipboard.. That clipboard is then wiped after X seconds.

So then you know that you have been rooted => If that fails to resolve it.

Reduce the number of vectors to know what you have to change asap. in this scenario you don't want to be guessing about how they did it.

The randomised gibberish just means you can rule out certain things. I can agree on part of what your saying but a string high entropy password, makes it harder to brute..

Many services don't really do that whole retries thing properly. So make it take as long as possible.

If you don't use a random gibberish your password can be cracked on any consumer device in a surprisingly short amount of time...

This way you can then focus on that a session token is probably how they got in.. It's the most common vector these days...

mlmonkeyMar 27, 2026, 3:19 PM
> On their website, the hacker group Handala Hack Team said . . . .

Anybody have a link? You know, for science ...

Edit: Apparently, just last week the DoJ snatched their domains: https://www.justice.gov/opa/pr/justice-department-disrupts-i...

megousMar 27, 2026, 3:46 PM
not all of them, search harder
AnimalMuppetMar 27, 2026, 3:52 PM
So, to echo the previous comment, got a link?

"Search harder" is a pretty unfriendly response to a request for a link...

megousMar 27, 2026, 4:25 PM
Just saying that there's a working link if you search. It's a useful information on its own.

There's no reason to post it directly. Their server is slow today even without adding lazy (ok, HN readers not interested in applying some effort to the matter) HN readers to the mix.

kevincloudsecMar 27, 2026, 3:00 PM
Forget the Iran attribution for a second. The FBI director's personal email was already in leaked credential databases from prior breaches.
bcjdjsndonMar 27, 2026, 3:20 PM
Every now and then something happens that makes me wonder how the fuck America is number one, this being one of them.
vrganjMar 27, 2026, 5:18 PM
Don't worry, it's on its way out.
basiswordMar 27, 2026, 4:31 PM
Number one based on what metric other than they constantly say they're number one?
krappMar 27, 2026, 4:01 PM
America had the advantage of getting through WW2 relatively unscathed with lots of resources and intact infrastructure that it used to leverage against the reconstruction of Europe, Japan and the USSR and entrench its cultural and economic hegemony. Also the US essentially colonized the West with nuclear weapons under the guise of "Pax Americana" and making the dollar the reserve currency.

That's really it. Not moral superiority, not technical ingenuity, not the indomitable American spirit. Just imperialist opportunism.

bpt3Mar 27, 2026, 3:52 PM
Loads of natural resources, no local military threats, and historically a government that stayed out of the way and allowed individuals to reap the rewards of their efforts.

The first is almost impossible to screw up, though we're really trying on the last front.

1234letshaveatwMar 27, 2026, 3:31 PM
We're ranked number one based on the summation of all the angsty teen America bad comments on social media. At least that is the stat the press goes off of I believe
jortsMar 27, 2026, 3:29 PM
Because America is a lot more than a podcaster put into a position that he has no qualifications for.
1234letshaveatwMar 27, 2026, 3:32 PM
[flagged]
7174n6Mar 27, 2026, 4:55 PM
I'm sure it will be embarrassing for him personally, but not a breach of U.S. government systems.

Kudos to CNN for publishing a balanced take on it.

ebiesterMar 27, 2026, 5:16 PM
These are a group that used outside signal chats to discuss war plans. What odds do you have that he didn't use a personal email to avoid future accountability?
hnlmorgMar 27, 2026, 6:56 PM
That’s depressingly common with politicians the world over because Signal supports disappearing messages.

So I wouldn’t expect someone who uses Signal to automatically be the kind of person to use personal email for work.

SirFattyMar 27, 2026, 5:01 PM
You're assuming that he didn't use personal email for his FBI "work".
7174n6Mar 27, 2026, 5:18 PM
The leak is from 2011-2022. He wasn't in the government then!!!!
awkwardpotatoMar 27, 2026, 5:54 PM
per Lorenzo Franceschi-Bicchierai

> In some cases, Patel appears to have sent emails from his former Justice Department email address in 2014 to his Gmail account. TechCrunch found that the emails sent from Patel’s DOJ account also appeared to be authentic.

phononMar 27, 2026, 5:45 PM
Are you kidding? He had extremely sensitive roles as Devin Nunes' House committee aide from 2017–2019 in the House Permanent Select Committee on Intelligence, National Security Council aide and deputy director of national intelligence (2019–2020), and then Chief of staff to the secretary of defense (2020–2021).
enointMar 27, 2026, 6:01 PM
I wonder how much of 2021. Two FBI agents reported that he was the bag man for payments to alter Jan 6 cases.

https://www.nytimes.com/2023/03/02/us/politics/house-weaponi...

HikikomoriMar 27, 2026, 5:53 PM
Muhammad523Mar 27, 2026, 6:46 PM
What a weird looking book. The cover shows Trump as the king, lol Anyways, if i were a parent, i'd certainly try to do everything to prevent my kids (under 10) from getting into politics. Let them live as normal kids should.
athrowaway3zMar 27, 2026, 6:51 PM
The US media has a clear understanding that their reporting on the war needs to be filtered and biased. This is not some coming-to-their-senses against sensationalism, but a nothingburger they know they can't sensationalize without great risk.

As is the case in any administration; let alone with an admin as vindictive as Trump's.

This "balanced take" warrants kudos?

We're not even pretending to lift the bar off the ground when it comes to mainstream media, are we?

ThaDoodMar 27, 2026, 3:05 PM
If you check their telegram channel they have some humorous photos and his resume.
bcjdjsndonMar 27, 2026, 3:15 PM
Looking good there, murica, looking good
caaqilMar 27, 2026, 7:19 PM
If you read the news with enough cynicism, you'll realize that rules like formality, password strength or cybersecurity hygiene are for the average Joes, not the morons/perverts who run the world.
b8Mar 27, 2026, 5:15 PM
Not surprising as email providers like Yahoo's security are a joke. A former CIA director got his personal emailed pwned as well.
pixl97Mar 27, 2026, 4:53 PM
>“This isn’t an FBI compromise — it’s someone’s personal junk drawer,” he said.

Eh, with how many people in the current administration seem to use out of band channels to communicate very important things who knows what else they located.

ranyumeMar 27, 2026, 5:07 PM
This isn’t a written by a human — it's a AI-accelerated piece.
SpellinatorMar 27, 2026, 5:50 PM
As if this is the first time this has ever happened.

How many former officials used personal accounts about government business?

How many corporate executives communicate business via personal accounts to avoid legal discovery?

How many individuals communicate outside their main email accounts to avoid scrutiny or attribution?

Point is, nobody should feel superior or shocked that such things like this happen. I understand some enjoy the privacy of their perceived enemies being exposed, but IMHO, nobody should be happy about invasion of anyone's privacy.

sirbuttersMar 27, 2026, 4:54 PM
Most incompetent administration in the modern era.
helterskelterMar 27, 2026, 5:05 PM
Think about it this way, this administration is the most competent administraion we've ever had at being incompetent.
Muhammad523Mar 27, 2026, 6:48 PM
I dont know why your comment got grayed out but it made me smile.
griffzhowlMar 27, 2026, 4:51 PM
But just a personal account with materials reportedly from 2011-2022, not an FBI breach
nickpinkstonMar 27, 2026, 2:53 PM
Iran... if you're listening...

We'd love to see all of those Epstein files.

shagieMar 27, 2026, 3:34 PM
Is this a reference to

https://www.pbs.org/newshour/politics/trump-asked-russia-to-...

> "Russia, if you're listening, I hope you're able to find the 30,000 emails that are missing, I think you will probably be rewarded mightily by our press," Trump said in a July 27, 2016 news conference.

nickpinkstonMar 27, 2026, 7:33 PM
Haha - yes exactly.
huggerl88Mar 27, 2026, 3:14 PM
[flagged]
AngryDataMar 27, 2026, 3:28 PM
All the time, just those military aged men don't call them their enemy because they know they aren't. Vietnam, Korea, Iraq, Afganistan, etc, most people don't consider the majority of those peoples the enemy whether they are fighting or not because they don't think we should have been trying to kill or subjugate them in the first place.

The goals and ideals of politicians and powermongers rarely aligns with the majority of the population.

flipgimbleMar 27, 2026, 3:27 PM
I’d never support a repressive theocracy like the current Iranian regime and will not cheer on their propaganda operations.

But let’s not confuse this Iran conflict with a legitimate war. Only congress can declare war and appropriate funds for a war. What we have is a rogue authoritarian executive that was incompetent enough to ignore military assessments and be manipulated by Netanyahu to strike.

People should protest like there is no tomorrow when la senile demagogue is destroying the international world order, free trade and freedom of the seas. That is not the same as rooting for the enemy!

guzfipMar 27, 2026, 3:49 PM
> What we have is a rogue authoritarian executive that was incompetent enough to ignore military assessments and be manipulated by Netanyahu to strike.

Yeah, except we’ve had that for the entirety of this century so far at least.

paxysMar 27, 2026, 3:32 PM
Iran has done nothing to harm the average American. Who is the enemy, really?
trimethylpurineMar 27, 2026, 3:43 PM
embedding-shapeMar 27, 2026, 3:17 PM
Maybe we need to get rid of the concept of "enemy" and "ally", as seemingly those labels matter less and less as time goes on.

Maybe one is the "enemy", and the others can be "less enemy" and "more enemy". So we're all enemies in reality, but some more enemies than others.

fhdkweigMar 27, 2026, 3:42 PM
how about "useful" and "not useful"?
ZigurdMar 27, 2026, 3:49 PM
We had allies. Now they are treaty signatories asking themselves WTF?
blitzarMar 27, 2026, 3:28 PM
There are 193 countries in the world other than America and whichever country they are bombing this week.
SG-Mar 27, 2026, 3:28 PM
this is where you find out you're the bad guy.
huggerl88Mar 27, 2026, 3:48 PM
[flagged]
ProllyInfamousMar 27, 2026, 3:40 PM
The time is now, fellow old men.

—older #millenial (recently re-enlistable ha ha ha ja ha ha)

taytusMar 27, 2026, 3:15 PM
Who said they are the enemy?
bcjdjsndonMar 27, 2026, 3:16 PM
Yeah lol, if you're suddenly policeman of the world going after evil regimes, how is North Korea still standing? They're forced to be robots or they're killed
pasquinelliMar 27, 2026, 3:42 PM
consider that the same people that tell you what's going on in the DPRK also said iran was two weeks away from nuking the middle east, that something called the cartel of the sun was responsible for the drug trade in the united states, and that epstein killed himself.
guzfipMar 27, 2026, 3:51 PM
At the end of the day. There are enough idiots to fall for it not once, but twice. The exact same lie.

We’re doomed because the people are idiots.

pasquinelliMar 27, 2026, 3:44 PM
look up revolutionary defeatism.
CrzyLngPwdMar 27, 2026, 2:59 PM
Where did the article go?
morkalorkMar 27, 2026, 5:12 PM
No worries. As long as rigorous due diligence was followed when vetting him as a candidate, there will surely be nothing embarrassing or harmful found in his personal emails.
ck2Mar 27, 2026, 5:14 PM
I'm sorry but nothing can ever be more embarrassing for that man who wrote this book to get that job

https://www.amazon.com/Plot-Against-King-Kash-Patel/dp/19555...

What an absolute clown

But far more seriously, imagine the danger he has put this country into by firing so many critical people, some specifically and uniquely for Iran and Middle-East defense

Let's hope we don't get another 9/11 in the next 1000 days because they are completely unprepared and won't ever see it coming, maybe even on purpose

autoexecMar 27, 2026, 5:34 PM
> Let's hope we don't get another 9/11 in the next 1000 days because they are completely unprepared and won't ever see it coming, maybe even on purpose

Why would anyone bother to attack us now? This entire administration has done more to make The US weak and vulnerable than any outside attacker could have hoped to accomplish. They can just sit back and watch rome burn

gverrillaMar 27, 2026, 7:26 PM
> Why would anyone bother to attack us now?

https://en.wikipedia.org/wiki/List_of_wars_involving_the_Uni...

autoexecMar 27, 2026, 8:09 PM
We've given a lot of people a lot of reasons to hate us sure, but no matter how much you hate someone, if you see them kicking their own ass it just makes sense to let them finish before you jump in.
OarchMar 27, 2026, 5:21 PM
How am I only finding out about this now... my sides
basiswordMar 27, 2026, 4:30 PM
How the heck is the buried down to page 4 after one hour?? The head of the FBI having his email hacked is a pretty big tech story.
nickburnsMar 27, 2026, 5:47 PM
Negative voting.
BenFranklin100Mar 27, 2026, 6:45 PM
I’m surprised no group has hacked the Epstein files, given the extreme interest.
jameskiltonMar 27, 2026, 4:51 PM
But ... but her emails!
LevitzMar 27, 2026, 5:10 PM
I mean, yes? You can give whatever weight you want to the whole thing, but the core issue with Hillary Clinton and the emails was that she was storing material on a private server rather than in official infrastructure.

If Patel didn't do such thing here, the breach should only expose personal stuff, if he did, then it's much more of a problem, but either way this is a really clear example of why concern was raised back at the time.

pugchatMar 27, 2026, 5:21 PM
[dead]
techpulse_xMar 27, 2026, 3:00 PM
[flagged]
4k0hzMar 27, 2026, 5:18 PM
[dead]
dyauspitrMar 27, 2026, 5:06 PM
[flagged]
akdev1lMar 27, 2026, 5:33 PM
>just a slow decline into incompetence.

Give them some credit, it’s been quite rapid.

chrisweeklyMar 27, 2026, 6:43 PM
when were they anything other than incompetent?
TostinoMar 27, 2026, 5:12 PM
This was an extremely limited leak. Just looked through the zip. I wouldn't doubt he does use his personal email for government purposes, but it's not in here.
knowaveragejoeMar 27, 2026, 5:07 PM
Remember when that was considered an actual issue in 2016? I remember congressional hearings over this.
e2leMar 27, 2026, 5:18 PM
For those who decried Hillary's E-Mail server but fail to apply the same standards to the current administration, it was never a real issue to begin with. Just performative nonsense.
add-sub-mul-divMar 27, 2026, 5:08 PM
And it's not a coincidence that they're also the ones who shout about "meritocracy" the loudest.
creantumMar 27, 2026, 3:34 PM
[flagged]
thejazzmanMar 27, 2026, 3:36 PM
Hacked
creantumMar 27, 2026, 3:46 PM
Leaked
dansoMar 27, 2026, 4:05 PM
yeah it’s totally plausible that Google would risk the reputation and legal status of its global multi-trillion empire to dunk on one of the handful of people who have the near-unilateral authority to dismantle them
mikeyouseMar 27, 2026, 4:12 PM
Also - there's zero chance any employees at Google could decide to leak the contents of a specific inbox. That'd be an insane security hole which would've been exploited multiple times already.
creantumMar 27, 2026, 5:56 PM
Sysadmins have full access.
john_strinlaiMar 27, 2026, 3:52 PM
i am eagerly awaiting your evidence for this claim
joe_mambaMar 27, 2026, 4:58 PM
Did they find those non-existent Epstein files?

@vrganj No, the opposite. The Trump admin with Kash Patel, was claiming early on that the Epstein files are a hoax, that he's seen the files personally and there's "nothing there".

@vrganj It makes sense if you know the context.

vrganjMar 27, 2026, 5:01 PM
Is that the latest spin to defend the pedophile class?

I see you updated your comment, but in a way that doesn't make any sense. Of course the pedophiles in the files will say it's a hoax.

bigyabaiMar 27, 2026, 6:30 PM
The DOJ acknowledges that over 100,000 files are still withheld.