atf2 articles
ATF Got Hit by Qilin Ransomware. The Reassurances Are Already Flowing.
The ATF has confirmed a cybersecurity incident after the Qilin ransomware group claimed to have attacked the agency, though the breach was limited to a standalone system that was quickly disconnected and did not affect the ATF's broader network or operations. The Department of Justice has designated the event a "major incident" and an investigation is underway. Qilin, a double-extortion ransomware group active since at least 2022 with over 2,000 listed victims, has not yet specified what data was stolen or when it may be leaked.
Qilin Ransomware Gang Claims ATF Scalp as Feds Confirm 'Major' Breach
The US Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) is responding to a "major" cybersecurity incident after the Russia-linked Qilin ransomware gang claimed responsibility, posting the agency on its leak site. ATF states that the breach was limited to a standalone computer system containing investigation target information, with no impact on its broader network or operations. The Department of Justice has designated the compromise a "major incident," and an investigation is ongoing, with ATF declining to provide further details.