Storyline
ATF ransomware cyberattack investigation 2026
One page that accretes the verified record as the story develops. Every fact keeps its date and its sources.
1 DAYS
15 FACTS
1 EVENTS
1 SOURCES
FIRST ENTRY AUG 27
AUG 27 · Day 1
ATF investigates major cybersecurity incident as ransomware group claims attack
Senior Justice Department officials designated the cybersecurity event a "major incident" under applicable federal guidelines.
The ATF said it is investigating a cybersecurity incident involving a standalone system.
GalaxyWarden reported that ATF appeared on Qilin's leak site and that the group claimed it obtained files from the agency.