ATF investigating ‘major’ cybersecurity incident
The bureau said the isolated system held investigative target information and that its main network and eForms platform were not affected.
- On Wednesday, the Bureau of Alcohol, Tobacco, Firearms and Explosives confirmed a cybersecurity breach of an isolated system following claims from the Russian-linked ransomware syndicate Qilin. The agency stressed that the affected environment functions separately from its main enterprise network.
- Operating on a double-extortion ransomware model, the Russian-linked Qilin group has claimed roughly 1,900 victims over the past 18 months since first emerging in 2022. The syndicate uses affiliates to steal and encrypt data while threatening public release.
- Senior Justice Department officials classified the breach as a "major incident" under federal guidelines, triggering direct DOJ involvement. The bureau reported that investigative tools and operational files were accessed, but gun-owner information was not compromised.
- ATF spokesperson Tanya Roman stated the affected system was "quickly shut down when the breach was discovered," and an investigation remains ongoing. The agency stressed that its ability to perform its missions has not been impacted.
- The incident has drawn scrutiny from Second Amendment groups regarding the safety of at least 866 million digitized firearms records held by the ATF. This breach follows a pattern of recent cyber intrusions across federal law enforcement and government infrastructure.
42 Articles
42 Articles
CyberScoopcybernoz.comATF confirms cyberattack hit system containing info on its investigation targets
The prolific ransomware group Qilin claimed responsibility for the attack. ATF insists the incident was limited to a standalone system and hasn’t impacted critical operations. The post ATF confirms cyberattack hit system containing info on its investigation targets appeared first on CyberScoop.
US government alcohol and firearms agency ATF declares ‘major incident’ after ransomware gang claims cyberattack
Ransomware group Qilin lists Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) among new victims, claiming a “major incident”ATF confirmed breach of a standalone system holding investigation target data, not core networksSystems were disconnected, DOJ notified; Qilin is Russia‑linked, known for past Synnovis attackThe US Government's Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has suffered a “major incident” in which it app…
ATF Admits Breach of System Holding Investigation Targets as Qilin Ransomware Claims Victory
The Bureau of Alcohol, Tobacco, Firearms and Explosives moved quickly Wednesday to contain damage from a cybersecurity breach. The agency confirmed a standalone system had been compromised. That system held information on targets of ATF investigations. Hours earlier, the Qilin ransomware gang listed ATF on its dark-web leak site. The posting offered no samples. It gave no details on stolen data or volume. Yet the timing left little doubt about t…
Coverage Details
Bias Distribution
- 57% of the sources are Center
![[your]NEWS](/_next/image?url=https%3A%2F%2Fgroundnews.b-cdn.net%2Finterests%2Ffb6dc495f74049f513563c33352175eaa0ecd509.jpg%3Fwidth%3D60&w=128&q=75)
Factuality
To view factuality data please Upgrade to Premium
