A significant data breach involving the European Commission has been attributed to the cybercriminal group known as TeamPCP. The incident, which took place on March 19, resulted in the theft of approximately 92 gigabytes of data from an Amazon Web Services account used by the EU's executive body.
The breach impacted the cloud infrastructure of the Europa.eu platform, utilized by member states for hosting official websites and publications. CERT-EU, the EU's cybersecurity agency, reported that data from at least 29 other EU entities may also be compromised. The stolen information includes personal data such as names and email addresses, with around 52,000 files containing sent email messages, some of which may expose original user-submitted content.
Following the breach, another hacking group called ShinyHunters published the stolen data online. The attribution of the breach to both TeamPCP and ShinyHunters is unusual, as they are separate entities. CERT-EU is in communication with affected organizations as it continues to analyze the impact of this incident.