European Commission Investigates Cloud Cyberattack

The European Commission announced on Friday that it is investigating a cyberattack detected earlier this week on its cloud infrastructure, where unauthorized actors accessed and stole data from the system hosting the europa.eu websites.

The breach occurred on Tuesday and targeted the Commission's Amazon Web Services (AWS) environment, according to officials. A threat actor claimed responsibility, telling security news site BleepingComputer that they had compromised at least one account used to manage the cloud setup and extracted more than 350 gigabytes of data, including multiple databases and internal files. The actor provided screenshots as evidence, showing access to employee information and an email server. Unlike many such incidents, the hacker stated no intention to extort the Commission but plans to publish the stolen data online at a later date.

Commission spokesperson Nika Blazevic confirmed the incident affected part of the cloud infrastructure but emphasized that internal systems remained untouched. "We have taken immediate steps and contained the attack," Blazevic said. "Risk mitigation measures were also implemented." The Commission isolated the affected...