“Shortly after that discovery, the USMS disconnected the affected system, and the Department of Justice initiated a forensic investigation,” according to the spokesperson. “The affected system contains law enforcement sensitive information, including returns from legal process, administrative information, and personally identifiable information pertaining to subjects of USMS investigations, third parties, and certain USMS employees.”

The nation’s oldest law enforcement agency did not say who was behind the attack nor did they say if they paid the ransom to unlock the affected system. The government warns against paying the ransom.

The USMS released a statement regarding the ransomware attack acknowledging that a current investigation is underway. “The Department’s remediation efforts and criminal and forensic investigations are ongoing. We are working swiftly and effectively to mitigate any potential risks as a result of the incident,” they said.