ATF names the hacked system, but not the NFA registry

ATF has confirmed that data was published from a hacked internal system, and gun owners are already turning that into claims about the NFA registry being breached. A new video from Jared Yanis breaks down ATF's second official statement on the incident and explains why that leap is not supported by what the agency has actually said.

The short version

Jared Yanis reports that ATF's original August 26 statement described a cybersecurity incident limited to a standalone system, with the agency specifically saying its enterprise network and eForms were unaffected. On August 31, ATF issued a follow-up statement acknowledging something new: claims that data from the compromised system has actually been published. ATF identified the system as CALEA, used in connection with lawful surveillance authority, and said the exposed material relates to ATF investigative matters.

Yanis stresses that ATF has not confirmed the authenticity, nature, or scope of what was posted, and the agency has said nothing to suggest the NFA registry or eForms were touched. He notes his own ATF sources told him the same thing before the second statement came out. The ransomware group Qilin, known for stealing data before demanding payment, has claimed responsibility.

Key points

• System named: ATF says the compromised system is CALEA, a legacy standalone system tied to investigative matters, not eForms or the enterprise network.
• Three unknowns: ATF states it cannot yet confirm the authenticity, nature, or scope of the published material.
• NFA/eForms unaffected so far: ATF has repeatedly said the affected system was not connected to its other operational systems, including eForms.
• Group behind it: Qilin, a ransomware-as-a-service operation known for "double extortion," has claimed the attack.
• Open questions: Yanis lists unanswered issues including how long hackers had access, what data CALEA actually held, and whether investigators, informants, or agents could be identified.
• Agency context: Yanis notes ATF Director Robert Varrone previously told him the bureau's computer systems are outdated and in need of modernization.

Bottom line

As of this update, ATF has not confirmed any compromise of NFA records or eForms submissions, so gun owners should not assume their firearms paperwork was part of this leak. Yanis argues the bigger story is ATF's handling of sensitive investigative data on old systems, and he plans to keep tracking what Qilin actually obtained.

Source: Jared Yanis