ATF Declares 'Major Incident' After Ransomware Gang Claims Federal Hack

The ATF has formally declared a major cybersecurity incident to Congress after a prominent ransomware group claimed responsibility for exfiltrating internal agency files.

The Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has become the latest federal law enforcement agency to notify United States congressional leaders of a major cybersecurity incident under federal disclosure mandates.

The declaration follows public claims by an extortion syndicate alleging access to sensitive internal network shares and operational databases. Federal incident response teams and CISA have initiated forensic audits to assess the extent of unauthorized access.

Cybersecurity officials emphasize that securing federal networks against ransomware exploitation remains a top national security priority as state-aligned actors and criminal syndicates target public infrastructure.