Back

Iranian Hackers Breach US Space Force Official's Instagram Account

Severity: Medium (Score: 59.9)

Sources: Edition.Cnn, News.Az, Cnn

Published: 2026-06-01 · Updated: 2026-06-01

Keywords: account, hackers, space, force, instagram, iranian, breach

Severity indicators: rce, breach

Summary

On June 1, 2026, Iranian hackers temporarily breached the Instagram account of Chief Master Sergeant John Bentivegna, a senior official in the US Space Force. The attackers posted pro-Iran and anti-US propaganda, including a video featuring audio from 'Hanoi Hannah,' a Vietnam War propagandist. The breach raised concerns about the security of military personnel's online accounts amid ongoing US military operations against Iran. Bentivegna advised colleagues not to engage with the hacked content while the Space Force worked to regain access. The incident highlights the ongoing cyber warfare and propaganda battles associated with the US-Iran conflict. The Space Force confirmed the hack but did not disclose how long the content was visible or the identity of the attackers. This breach follows other incidents involving Iranian hackers targeting US officials, including a previous breach of FBI Director Kash Patel's email account. Key Points: • Iranian hackers breached the Instagram account of a senior US Space Force official. • The account was used to post anti-US propaganda, including historical references. • The incident underscores ongoing cyber threats amid US military operations against Iran.

Detailed Analysis

**Impact** The compromised account belonged to Chief Master Sergeant John F. Bentivegna, the top enlisted guardian in the U.S. Space Force, affecting a senior military official directly involved in space operations. The breach allowed Iranian hackers to post pro-Iran and anti-U.S. propaganda, potentially undermining morale and spreading disinformation among U.S. military personnel and the public. No direct data exfiltration was reported, but the incident contributes to ongoing psychological and information warfare amid the U.S.-Iran conflict, primarily impacting U.S. military sectors and personnel in the Middle East and beyond. **Technical Details** The attack vector involved unauthorized access to the Instagram account, likely through credential compromise or social engineering, though specific TTPs, malware, or CVEs exploited were not disclosed. The hackers briefly controlled the account to post propaganda content, indicating a compromise at the account access stage of the kill chain. No infrastructure details or IOCs were provided in the reports. **Recommended Response** Immediate actions include enforcing multi-factor authentication (MFA) on all social media and official accounts of military personnel to prevent unauthorized access. Monitor for suspicious login attempts and unusual account activity, especially on platforms used by senior officials. Conduct user awareness training on phishing and social engineering risks. No specific patches or malware detections are applicable based on available information.

Source articles (3)

  • Iranian hackers briefly breach US Space Force officer's Instagram account — News.Az · 2026-06-01
    Iranian hackers briefly breached and took control of an Instagram account run by U.S. Space Force Chief Master Sergeant John F. Bentivegna before the account was recovered, News.Az reports, citing Cla…
  • Hackers breach senior US Space Force official's Instagram account and post Iranian propaganda — Edition.Cnn · 2026-06-01
    Hackers breached a senior US Space Force official’s Instagram account and temporarily posted a string of pro-Iran and anti-US propaganda on Sunday, some of it invoking the Vietnam War. One video revie…
  • Hackers breach senior US Space Force official's Instagram account and post Iranian propaganda — Cnn · 2026-06-01
    Hackers breached a senior US Space Force official’s Instagram account and temporarily posted a string of pro-Iran and anti-US propaganda on Sunday, some of it invoking the Vietnam War. One video revie…

Timeline

  • 2026-06-01 — Instagram account breach confirmed: Iranian hackers took control of Chief Master Sergeant John Bentivegna's Instagram account, posting propaganda before it was recovered.
  • 2026-06-01 — Bentivegna advises caution: The Space Force official warned colleagues not to click on links or engage with the hacked posts while recovery efforts were underway.
  • Recent — Previous breaches reported: Earlier incidents included Iranian hackers breaching the personal email of FBI Director Kash Patel, leaking sensitive content.

Related entities

  • Data Breach (Attack Type)
  • FBI (Company)
  • U.S. Space Force (Company)
  • US Space Force (Company)
  • Iran (Country)
  • Vietnam (Country)
  • news.az (Domain)
  • war.in (Domain)
  • Instagram (Platform)
Loading threat details...

Threat Not Found

The threat cluster you're looking for doesn't exist or has been removed.

Return to Feed