CYBERSECURITYTRACKER
TRACKING
Permanent story citation

ATF confirms cyberattack hit system containing info on its investigation targets

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 5346

As cited

Copy frozen at (site build).

ransomware

ATF confirms cyberattack hit system containing info on its investigation targets

The Bureau of Alcohol, Tobacco, Firearms and Explosives disclosed a cyberattack targeting a standalone system containing information on investigation targets. The financially-motivated ransomware group Qilin claimed responsibility, though the agency has not independently confirmed the claim or provided details on when the breach occurred. ATF stated the affected system was isolated from other agency infrastructure and that operational capabilities remain unimpaired.

Why it matters: Law enforcement and federal agencies must assess the risk of their own investigation infrastructure being exposed to threat actors, and security teams should review whether similar isolated systems in their organizations are adequately segmented and monitored.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

ransomware

ATF confirms cyberattack hit system containing info on its investigation targets

The Bureau of Alcohol, Tobacco, Firearms and Explosives disclosed a cyberattack targeting a standalone system containing information on investigation targets. The financially-motivated ransomware group Qilin claimed responsibility, though the agency has not independently confirmed the claim or provided details on when the breach occurred. ATF stated the affected system was isolated from other agency infrastructure and that operational capabilities remain unimpaired.

Why it matters: Law enforcement and federal agencies must assess the risk of their own investigation infrastructure being exposed to threat actors, and security teams should review whether similar isolated systems in their organizations are adequately segmented and monitored.

VendorsGoogle
Actorsqilinbianlianscattered spider
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary