ATNS was hit by a ransomware attack

Assessment

Several reports state ATNS came under or suffered a ransomware attack. ATNS's own wording is narrower: malware commonly associated with the early stages of ransomware attacks, which its internal teams say they contained and removed. No encryption event, ransom note, extortion demand, or leak-site listing has been reported, and no ransomware family has been named. Describing it as a completed ransomware attack overstates what ATNS and the primary record establish; early-stage, contained malware is not a consummated ransomware deployment.