Home / Crime and Justice / Major Incident Declared After ATF Hack
Major Incident Declared After ATF Hack
27 Aug
Summary
- ATF confirms cyberattack on standalone system.
- Investigation data may have been exposed.
- Qilin ransomware gang claims responsibility.
The U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has officially declared a cyberattack on one of its systems a "major incident." This formal classification mandates notification to Congress within a week of discovery, as per federal law. The targeted system is standalone, separate from the bureau's main network.
Initial reports indicate that the compromised system held sensitive information, such as "targets of ATF investigations." The Qilin ransomware gang has surfaced a claim of responsibility on its leak site, although they have not yet offered proof. Qilin operates a ransomware-as-a-service model, leasing its tools to other cybercriminals.
This designation places the ATF alongside other U.S. government agencies that have experienced major cyber incidents in recent years. Notable examples include a ransomware attack on a U.S. Marshals Service system in 2023 and a breach of an FBI system earlier this year, which exposed phone numbers linked to federal surveillance targets.
