ATF Confirms Major Cybersecurity Breach of Investigation System

The Bureau of Alcohol, Tobacco, Firearms and Explosives confirmed on August 27, 2026, that a standalone computer system containing information about targets of its investigations had been compromised in a cybersecurity breach. The incident was designated a major incident by senior Justice Department officials, a classification that triggers formal notification to Congress.

The breach was publicly acknowledged hours after the Qilin ransomware gang listed the ATF on its dark web leak site early on August 27. ATF spokesperson Tanya Roman stated that the affected system was isolated and not connected to the agency's main network, case management systems, laboratory systems, or the public-facing eForms platform. The agency said it immediately disconnected the compromised system upon discovery and launched forensic and incident response activities.

"The impacted system operates separately from the ATF enterprise network, and there is no indication that the incident has affected the ATF enterprise network, the ATF eForms system, or any other ATF system," the agency said in a statement. ATF emphasized that the breach has not impacted its ability to perform its law enforcement and...