US EditionPublished • loading... • Updated
EU Cyberattack May Have Been Worse than We Thought - 90GB of Data Published Online as 30 Entities Hit
CERT-EU said the breach exposed personal data from 71 Europa web hosting clients, including 42 internal Commission clients and at least 29 other EU entities.
- On Thursday, the European Union's Cybersecurity Service attributed the European Commission cloud hack to the TeamPCP threat group, compromising data from up to 71 clients including 42 internal accounts and at least 29 other Union entities.
- Hackers initiated the breach on March 19 using a compromised Amazon Web Services API key obtained during a supply-chain attack on the open-source security tool Trivy, allowing unauthorized access to the Commission's cloud environment.
- CERT-EU reported that attackers stole around 92 gigabytes of data containing at least 51,992 files related to outbound email communications, with 'bounce-back' notifications potentially exposing sensitive user-submitted content.
- ShinyHunters published a 90GB archive of the stolen dataset online on March 28, while the Commission notified data protection authorities and remains closed until next week for further response coordination.
- The incident demonstrates a growing trend of cybercriminal collaboration, as Palo Alto Networks Unit 42 noted TeamPCP has conducted systematic supply-chain attacks against platforms including GitHub and Docker.
Insights by Ground AI
19 Articles
19 Articles
At the end of March, a cyberattack was used to steal data from the European Commission via its cloud. An incident that leaves its areas of blur, but above all that reveals flaws in the institution's system. ...
·Brussels, Belgium
Read Full Article
Massive Data Leak Hits EU As Hackers Exploit Cloud System
Europe’s cybersecurity agency, CERT-EU, has blamed organised cybercriminal groups for a massive data breach involving the European Union’s executive arm. According to findings, the attackers infiltrated the cloud infrastructure of the European Commission, gaining access to sensitive data hosted on its Europa.eu platform. The agency disclosed that about 92 gigabytes of compressed data were stolen from a compromised Amazon Web Services account lin…
·Abuja, Nigeria
Read Full ArticleCoverage Details
Total News Sources19
Leaning Left1Leaning Right0Center4Last UpdatedBias Distribution80% Center
Bias Distribution
- 80% of the sources are Center
80% Center
L 20%
C 80%
Factuality
To view factuality data please Upgrade to Premium
