ATF Confirms Cyber Incident After Qilin Claims Targeting
Summary
ATF confirmed an intrusion affecting a standalone system, which it disconnected. The agency said there was no indication other ATF systems were affected; Qilin listed ATF on its leak site but made no specific breach claims.
Key points
- ATF said an intrusion affected a standalone system, which was disconnected after discovery.
- The agency reported no indication that its enterprise network, eForms system, or other ATF systems were affected.
- ATF said the incident did not affect its ability to perform its missions.
- The investigation is being conducted with the Justice Department; officials designated the event a major incident and completed required notifications.
- Qilin listed ATF on its leak site on August 26 but made no specific claims about the breach; the article reports no document screenshots or stated leak timer.
Article Details
- Victim Organization
- US Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF)
- Incident Type
- Cybersecurity incident; Qilin claimed to have targeted ATF, but the source does not confirm ransomware activity.
- Operational Impact
- The incident affected a standalone system, which was disconnected after the intrusion was discovered. ATF reported no indication that its enterprise network, eForms system, or other systems were affected, and said its mission was not impacted.
- Ransom Or Extortion
- Qilin listed ATF on its leak website on August 26, but made no specific claim about the breach. The source reports no evidence that files were stolen or leaked and provides no ransom demand.
- Claim Status
- confirmed