Uncategorized
August 27, 2026

Cyber Theft Campaign Charges Against 17 Iranians and ATF Incident Investigation

Charges Against Iranian Nationals

Seventeen Iranian nationals have been charged by the Department of Justice due to their involvement in a substantial cyber theft campaign. This campaign mainly targeted American universities and government agencies, with the hackers compromising networks to steal intellectual property since 2013. Reporter Alexandria Hoff has detailed these activities and noted that the United States remains committed to pursuing foreign cyber criminals regardless of the time elapsed since their offenses.

ATF Cybersecurity Incident

The Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) is currently investigating a cybersecurity issue concerning a standalone system. The occurrence has been labeled as a “major incident” under federal standards by senior Justice Department officials. This situation comes amid claims from the Qilin ransomware group, which stated that ATF was one of their victims, though they have not released evidence to back up their assertions, and ATF has not attributed the incident to them.

The affected system operates distinctively from ATF’s enterprise network. There’s no sign of impact on the broader network, eForms system, or any other ATF apparatus. Following the incident’s discovery, the agency disconnected the environment and initiated forensic and incident-response measures, while coordinating with the Justice Department during the investigation.

Information on the ATF System

No identification regarding the affected system nor details on its discovery were disclosed by ATF. It’s unclear if any data was accessed or stolen. Cybersecurity outlets have reported Qilin’s claims, but no evidence or supporting details were presented.

GalaxyWarden, a breach-monitoring service, also noted ATF on Qilin’s leak site. However, they haven’t independently verified these claims. Fox News Digital contacted ATF and the Justice Department for further information on the incident’s circumstances.

Ongoing Investigations and Public Assistance

The event, designated as a “major incident” by Justice Department officials under federal regulations, has required notifications to be completed by ATF. Despite the situation, ATF operations and its ability to fulfill missions remain unaffected.

The public is encouraged to provide any information related to the incident by contacting the ATF Tipline at 1-888-ATF-TIPS or 1-888-283-8477.

Update on ATF headquarters in Washington, D.C., illustrates the ongoing investigation of the cybersecurity incident. Security precautions remain active to ensure agency function and public safety.

TAGS: