A ransomware group claims it stole data from the Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF), potentially exposing sensitive information connected to federal criminal investigations.
Qilin, a Russian-speaking ransomware operation, said it is aware of claims involving the publication of information obtained from a standalone system and is working with the Department of Justice and other federal partners to assess the claims and take appropriate actions.
ATF Identifies Compromised System
In an updated statement Monday, ATF identified the affected system as its Communications Assistance for Law Enforcement Act (CALEA) system. ATF uses the system in connection with the federal law, and it contains information related to ATF investigative matters.
The agency said the legacy, standalone system operated separately from its other operational systems.
“ATF’s ability to carry out its mission has not been impacted,” the agency said.
On August 26, ATF said the incident did not affect its enterprise network, eForms system or any other ATF system.
The agency has not publicly attributed the breach to Qilin.
Leaked Files Appear To Include Investigation Data
Cybernews cautioned that it has not independently verified the material.
“ATF cannot confirm the authenticity, nature, or scope of the material at issue at this time,” the agency said.
Leak Could Expose Investigations And Sensitive Sources
Cybernews said the incident did not affect its enterprise network, eForms system or other ATF systems. The bureau also said the incident did not affect its ability to carry out its mission.
Senior Justice Department officials designated the event a “major incident” under applicable federal guidelines, and ATF said officials completed the required notifications.
Bruggeman reported Tuesday that the dataset links no longer appeared on Qilin’s leak site. The files had been publicly accessible for most of Monday, and Cybernews said copies could have been downloaded or circulated during that period.
ATF said it cannot provide additional details while its review and investigation continue.
Provided by Dallas Express
