ATF confirms compromise of standalone system after Qilin claims

The Bureau of Alcohol, Tobacco, Firearms and Explosives confirmed that a standalone system was compromised in what it called a major incident, after the Qilin ransomware group listed the agency on its leak portal. ATF said it terminated connections to the affected environment and began incident-response and forensic work with the Justice Department. The agency said the system operates separately from its enterprise network and that it has no indication the incident affected that network, eForms or other ATF systems. ATF also said operations were not affected.