ATF Says Breach Exposed Investigation-Target System; Qilin Claim Unconfirmed
Summary
ATF says a breach affected a standalone system containing information about investigation targets, but no other agency systems or mission operations. Qilin claimed responsibility; its involvement is unconfirmed and the incident remains under investigation.
Key points
- ATF says the breach involved a standalone computer system containing information about targets of its investigations.
- The system was not connected to ATF case management, laboratory or eForms systems, and was shut down after the breach was discovered.
- ATF says the incident did not affect its ability to perform its missions.
- Qilin claimed responsibility, but ATF has not confirmed the group’s involvement.
- ATF declined to comment on the incident’s cause or timing and said its investigation is ongoing.
Article Details
- Victim Organization
- Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF)
- Incident Type
- Cyberattack; Qilin-claimed ransomware attack, with Qilin's involvement unconfirmed
- Data Types Exposed
- Information about targets of ATF investigations was held on the affected system; exposure or theft was not confirmed.
- Operational Impact
- ATF said the affected standalone system was quickly shut down and was not connected to other ATF systems. The agency reported no impact to its mission operations.
- Ransom Or Extortion
- Qilin claimed responsibility. No ransom demand or payment was reported; the article says a ransom payment is very unlikely.
- Claim Status
- claimed