started · updated
ATF investigates major cybersecurity incident on standalone system
The Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) is investigating a cybersecurity incident that has been designated a ‘major incident’ by the Department of Justice. The breach affected a standalone computer system that is isolated from the agency's main enterprise network and the eForms platform.
An ATF spokesperson stated that the compromised system contained information regarding targets of ATF investigations. While the agency has disconnected the affected environment and initiated forensic analysis, it has not yet confirmed if data was stolen or if the Qilin ransomware group is responsible for the intrusion. Qilin, a Russia-linked ransomware gang, has claimed responsibility for the attack and listed the ATF on its leak website.
The ATF maintains that the incident has not impacted its ability to perform its law enforcement and regulatory missions. The investigation is being conducted in close coordination with the Department of Justice.
Entities
Bureau of Alcohol, Tobacco, Firearms and Explosives · Department of Justice · National Rifle Association · Qilin · United States
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 5 SOURCES] The incident has not impacted the agency's ability to perform its missions. nationalcybersecurity.com · www.epochtimes.com · laopinion.com · www.deccanchronicle.com · therecord.media
- [● 7 SOURCES] The cybersecurity incident affected a standalone system that is isolated from the ATF enterprise network and eForms platform. internewscast.com · nationalcybersecurity.com · www.epochtimes.com · laopinion.com · www.techradar.com · +2 more
- [● 8 SOURCES] The Qilin ransomware group claimed responsibility for the attack and added the ATF to its leak website. internewscast.com · nationalcybersecurity.com · www.epochtimes.com · laopinion.com · www.techradar.com · +2 more
- [● 6 SOURCES] Senior Justice Department officials have classified the breach as a ‘major incident’ under federal guidelines. internewscast.com · nationalcybersecurity.com · www.epochtimes.com · laopinion.com · www.techradar.com · +1 more
- [● 2 SOURCES] The compromised standalone system contained information regarding targets of ATF investigations. www.techradar.com · therecord.media