ATF cyberattack and investigative system shutdown
Public report preview
The Bureau of Alcohol, Tobacco, Firearms and Explosives shut down a breached standalone system containing information about targets of ATF investigations, creating a limited loss of an internal investigative resource while the agency retained its broader mission capability. Qilin later began publishing files that CNN and an independent researcher said appeared to contain ATF investigative material. ATF has not authenticated the files or attributed the incident, and no public evidence establishes ransomware encryption.
- Location
Recent incident intelligence
Paid member report preview
Unlock the complete incident report
New reports are available immediately to Sustainers, after 2 weeks to Supporters, and to everyone once they are more than 1 month old.
Sustainers help fund the research and verification behind the Cyber Incident Registry while receiving immediate access to new reports.
See something that needs correction?
Signed-in members can report an error, update, or missing source.