ATF confirms cyberattack after Qilin ransomware claims
ATF confirmed on Wednesday that a standalone system was breached in what it called a "major incident," following claims by the Qilin ransomware gang that it had compromised the U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives.
Source: BleepingComputer · August 27, 2026 at 11:01 AM · AI-assisted report
Single-source.jpg%2F1280px-Figure_5-_Bureau_of_Alcohol%2C_Tobacco%2C_Firearms%2C_and_Explosives'_Microfilm_Archive_for_Records_from_Out-of-Business_Federal_Firearms_Licensees_(29009752166).jpg%3Futm_source%3Dcommons.wikimedia.org%26utm_campaign%3Dimageinfo%26utm_content%3Dthumbnail&w=1280&output=webp&q=78&we)
WASHINGTON, 27 AUGUST 2026 —
ATF confirmed on Wednesday that a standalone system was breached in what it called a "major incident," following claims by the Qilin ransomware gang that it had compromised the U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives.
Market Impact
The agency said the impacted system operates separately from its enterprise network and that there was no indication the incident had affected core operations. ATF said it immediately cut connections to the affected environment and launched incident-response activities in coordination with the Department of Justice.
"The impacted system operates separately from the ATF enterprise network, and there is no indication that the incident has affected the ATF enterprise network, the ATF eForms system, or any other ATF system," the agency said in a statement. It asked the public to share any information on the attack via its official tipline.
Qilin, a ransomware-as-a-service operation first spotted in August 2022, has claimed more than 2,200 victims on its dark web leak site. Among its targets are Nissan, Yangfeng, Synnovis, Asahi, Lee Enterprises and Australia’s Court Services Victoria.
Cyberattacks on U.S. federal agencies have risen this year. The FBI confirmed in March it was investigating a breach affecting systems used to manage wiretap and surveillance warrants, while the Department of Homeland Security disclosed in July a cyberattack that compromised its Homeland Security Information Network, a sensitive information-sharing platform.
ATF did not provide details on the breach vector or the scope of data accessed, nor did it confirm whether any information was exfiltrated. A spokesperson did not immediately respond to BleepingComputer’s request for further comment.
Related: U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) · Washington