ATF Confirms Standalone System Compromised After Qilin Breach Claim
Summary
ATF confirmed a standalone system was compromised after Qilin listed the agency on its leak site. ATF says its enterprise network, eForms system, and operations were unaffected; it disconnected the environment and is investigating with the DOJ.
Key points
- ATF confirmed that one standalone system was compromised after Qilin listed the agency on its leak site.
- Qilin did not say whether it stole ATF files or demanded a ransom.
- ATF said there was no indication the incident affected its enterprise network, eForms system, or other ATF systems.
- The agency disconnected the affected environment and began incident-response and forensic activities.
- ATF is investigating with the Department of Justice and said agency operations were not affected.
Article Details
- Victim Organization
- U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF)
- Incident Type
- Compromise of a standalone system; Qilin listed ATF on its leak portal, but ransomware deployment or data theft was not confirmed.
- Operational Impact
- ATF said the affected system operated separately from its enterprise network, and that the enterprise network, eForms system, other ATF systems, and agency operations were not affected. ATF disconnected the affected environment and began forensic activities.
- Ransom Or Extortion
- Qilin listed ATF on its leak portal. The article says Qilin did not state whether it had stolen files or demanded a ransom.
- Claim Status
- confirmed