The European Commission confirmed a cyber attack impacting its cloud infrastructure hosting the Europea.eu platform. The threat actor accessed over 350GB of data before the Commission contained the attack.
The breach raises concerns about the security of sensitive information held by the Commission. The European Commission stated that it is notifying Union entities potentially affected by the incident. It has not yet revealed details on how the cloud infrastructure was compromised.
Ongoing investigations suggest that data was taken from Europa websites and employee information. The attack was carried out through one of the Commission’s Amazon Web Services accounts. This incident follows a similar breach disclosed in February, which also affected employee data.
Both incidents appear less severe than the Salt Typhoon hack that impacted US telecommunications companies in 2024. This major breach reportedly accessed data from smartphones belonging to members of the Trump and Harris campaigns and other government officials.
In response to ongoing cybersecurity threats, the European Commission introduced a new Cybersecurity Package in January 2026. This package aims to strengthen defenses and establish protocols for EU states to manage risks from companies within their telecom supply chains.
