ATF hit by ransomware attack
Incident
Summary
Hide ▲
Show ▼
The ATF confirmed a system compromise after the Qilin ransomware gang added the agency to its leak portal, creating a major incident that required immediate containment. The affected environment was a standalone system separate from the enterprise network, and the agency said there was no indication that ATF eForms or other systems were affected. ATF cut connections, launched incident-response and forensic work, and said its operations were not impacted.
Related Happenings
Luxury jewelry retailer hit by ransomware attack
Incident
H score45
First: 07.07.2026 16:27
Last: 07.07.2026 16:27
Sources 1
About this happening:
A luxury jewelry retailer suffered a help-desk social engineering intrusion in May 2025 that led to account takeover and the theft of at least 77 gigabytes of data...
Luxury jewelry retailer hit by ransomware attack
IncidentAbout this happening: A luxury jewelry retailer suffered a help-desk social engineering intrusion in May 2025 that led to account takeover and the theft of at least 77 gigabytes of data...
Microsoft civil action against Fox Tempest infrastructure takedown
Regulatory/Legal Action
H score24
First: 19.05.2026 18:00
Last: 19.05.2026 18:00
Sources 1
About this happening:
Microsoft filed a civil action against Fox Tempest in the US District Court for the Southern District of New York, securing a court order that enabled a broad disr...
Microsoft civil action against Fox Tempest infrastructure takedown
Regulatory/Legal ActionAbout this happening: Microsoft filed a civil action against Fox Tempest in the US District Court for the Southern District of New York, securing a court order that enabled a broad disr...
Washington Hotel brand in Japan / Fujita Kanko hit by ransomware attack
Incident
H score33
First: 16.02.2026 23:10
Last: 16.02.2026 23:10
Sources 1
About this happening:
The Washington Hotel brand in Japan disclosed a ransomware attack that compromised its servers and exposed various business data. The incident matters because some...
Washington Hotel brand in Japan / Fujita Kanko hit by ransomware attack
IncidentAbout this happening: The Washington Hotel brand in Japan disclosed a ransomware attack that compromised its servers and exposed various business data. The incident matters because some...
Conpet hit by data theft breach linked to Qilin
Incident
H score61
First: 05.02.2026 17:15
Last: 05.02.2026 17:15
Sources 1
About this happening:
Conpet disclosed a cyberattack that disrupted its business systems and took its website offline, creating operational risk for Romania's national oil pipeline operator...
Conpet hit by data theft breach linked to Qilin
IncidentAbout this happening: Conpet disclosed a cyberattack that disrupted its business systems and took its website offline, creating operational risk for Romania's national oil pipeline operator...
Timeline
-
27.08.2026 11:13 1 articles · 11h ago
Qilin adds ATF to dark web data leak portal
Campaign Scope UpdateQilin added the U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives to its dark web data leak portal on Wednesday, but did not say whether it had stolen files from ATF's systems or demanded a ransom.
Show sources
- ATF confirms “major incident” after recent Qilin breach claims — www.bleepingcomputer.com — 27.08.2026 11:13
-
27.08.2026 11:13 2 articles · 11h ago
ATF confirms standalone system breach
Initial DisclosureATF said a standalone system was breached in a "major incident," that the impacted system operates separately from the ATF enterprise network, and that there is no indication the incident affected the ATF enterprise network, the ATF eForms system, or any other ATF system. ATF terminated connections to the affected environment, started incident-response and forensic activities, coordinated with the Department of Justice, and said its operations were not affected.
Show sources
- ATF confirms “major incident” after recent Qilin breach claims — www.bleepingcomputer.com — 27.08.2026 11:13
- ATF confirms “major incident” after recent Qilin breach claims — www.bleepingcomputer.com — 27.08.2026 11:13