The bureau confirmed an incident after the Qilin ransomware group claimed a breach.