European Commission confirms data breach
Briefly

European Commission confirms data breach
"The European Commission has announced that it suffered a cyber attack that affected 'cloud infrastructure hosting the Commission's web presence on the Europea.eu platform.' While the attack has been contained, Bleeping Computer reports that the threat actor claiming to be behind it was able to take over 350GB of data before the Commission addressed the issue."
"'Early findings of our ongoing investigation suggest that data have been taken from [Europa] websites,' the European Commission says. 'The Commission is duly notifying the Union entities who might have been affected by the incident.'"
"According to Bleeping Computer, the threat actor was able to access the Europa sites and employee data via one of the Commission's Amazon Web Services accounts."
"In January 2026, the European Commission introduced a new Cybersecurity Package designed to address similar issues, in part by outlining new ways for EU states to deal with potentially risky companies in their telecom supply chains."
The European Commission reported a cyber attack affecting its cloud infrastructure on the Europa.eu platform. A threat actor accessed and stole over 350GB of data before the issue was contained. The Commission is investigating the breach, which involved access through an Amazon Web Services account. Notifications are being sent to affected Union entities. Previous breaches have occurred, but this incident is considered less severe than the Salt Typhoon hack impacting US telecommunications. A new Cybersecurity Package was introduced in January 2026 to address such threats.
Read at Engadget
Unable to calculate read time
[
|
]