Qilin Ransomware Group Claims Cyberattack on ATF System
The Qilin ransomware group, identified as having ties to Russia, has taken credit for a recent cyberattack on the Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) system. According to reports, the group listed the ATF among its victims on a dark web leak site, alongside other companies primarily in the industrial and manufacturing sectors, such as WireCo, Metal Conversions, and Air International Thermal Systems.
In response to the incident, the ATF issued a statement confirming that it promptly terminated connections to the affected system and began incident-response and forensic activities. The agency is working closely with the Department of Justice to investigate the breach.
While details regarding the specific information that may have been accessed during the cyberattack remain unclear, Gun Owners of America expressed concerns about the potential risks, noting that the ATF maintains a registry of over one billion guns and gun owners. The ATF emphasized that the cybersecurity incident affected a standalone system that was not connected to its enterprise network or eForms system. The agency assured that the system was quickly shut down upon discovery of the breach and that the investigation is ongoing.
