The U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) confirms it is investigating a cybersecurity incident described as “major” by Justice Department officials after the Qilin ransomware group claimed responsibility. Multiple outlets report the ATF notified relevant authorities and is conducting an investigation with the Department of Justice.

ATF says the incident involves a standalone system rather than its broader systems. According to reporting, the agency states the compromised environment did not appear to affect its enterprise network, the eForms system, or other ATF systems. TechRadar and Inc. Magazine add that information on investigation targets may have been exposed or related to the stand-alone system, while other coverage focuses on the designation of the incident and the ongoing investigation.

Overall angles differ between outlets: some emphasize ATF’s “major incident” designation and DOJ involvement, while others highlight claims by Qilin and the potential exposure of data tied to ATF investigation targets. The extent of impact is still under investigation.