The ATF is the latest federal government agency in recent years to notify Congress of a "major incident" involving its cybersecurity.