The ATF has confirmed a cybersecurity incident after the Qilin ransomware group claimed to have attacked the agency, though the breach was limited to a standalone system that was quickly disconnected and did not affect the ATF's broader network or operations. The Department of Justice has designated the event a "major incident" and an investigation is underway. Qilin, a double-extortion ransomware group active since at least 2022 with over 2,000 listed victims, has not yet specified what data was stolen or when it may be leaked.
