Technology
ATF investigates major cybersecurity incident as ransomware group claims attack
Justice Department officials designated an incident on a standalone ATF system as major, while a cybercrime group claimed responsibility without public evidence.
The short version
- The Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) is investigating a cybersecurity incident affecting an isolated standalone system.
- Justice Department officials designated the event a major incident under federal guidelines, though the ATF stated enterprise networks and systems like eForms remain unaffected.
- The Qilin ransomware group claimed responsibility on its leak site, but the ATF has not attributed the breach and no public evidence has been provided.
- The ATF disconnected the impacted system and launched a forensic investigation, reporting no disruption to its operational mission.
Key facts
- The ATF is investigating a cybersecurity incident on a standalone system that senior Justice Department officials designated a major incident under federal rules.[Fox News]
- The ATF disconnected the affected environment after discovering the breach and initiated incident-response efforts alongside the Justice Department.[Fox News]
- The Qilin ransomware group added the ATF to its leak site and claimed it stole agency files, though it published no supporting proof.[Fox News]
- The ATF stated that the targeted system operates separately from its enterprise network, that systems like eForms remain unaffected, and that agency operations have suffered no disruption.[Fox News]