ATF declares ‘major incident’ as ransomware gang claims hack

In Brief

The U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives, oregon ATF, says a cyberattack connected 1 of its systems has been declared a “major incident,” a formal, legally defined classification that prompts a ceremonial notification to lawmakers successful Congress.

ATF said in a statement that it’s responding to the cyberattack connected a standalone strategy that’s abstracted from the bureau’s network. An ATF spokesperson told reporters that the targeted machine strategy contained accusation specified arsenic the “targets of ATF investigations.”

TechCrunch has seen a assertion of work by the Qilin ransomware pack connected its leak site, but it did not supply grounds for its claim, specified arsenic a illustration of leaked data. Qilin is known for moving a “ransomware-as-a-service” operation, successful which it leases its hacking tools to different transgression affiliates for a chopped of the profits. The pack has listed media elephantine Lee Enterprises and U.K. pathology laboratory elephantine Synnovis.

Under national law, “major incidents” include important cyber incidents that are apt to origin demonstrable harm to U.S. nationalist information oregon broader U.S. interests. Agencies are required to disclose large incidents to Congress wrong a week of their discovery.

The ATF joins respective authorities agencies successful caller years that person declared large incidents pursuing a breach, including a 2023 ransomware onslaught connected a strategy utilized by the U.S. Marshals Service, and a breach of an FBI strategy earlier this twelvemonth that exposed telephone numbers of targets nether surveillance by national agents. 

Subscribe for the industry’s biggest tech news