Back Cybersecuritynews

CERT

Cybersecuritynews •Guru Baran • April 3, 2026

The European Commission’s primary web platform, “europa.eu,” recently suffered a severe data breach stemming from a supply-chain compromise involving the popular open-source vulnerability scanner, Trivy. On April 3, 2026, CERT-EU published an official advisory detailing how a threat actor known as TeamPCP exploited the compromised continuous integration and continuous delivery (CI/CD) tool to harvest Amazon […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

European Commission Cyberattack Compromises AWS Cloud Infrastructure The European Commission confirmed a cyberattack on March 24, 2026, affecting its cloud infrastructure on the Europa.eu platform. Hackers claimed to have stolen over 350GB of data, including sensitive information related to Commission employees and internal databases. The breach was reportedly facilitated through the compromise of at least one Amazon Web Services (AWS) account. The Commission's internal systems were not affected, and immediate containment measures were implemented to mitigate risks. The attackers have stated they will leak the stolen data rather than extort the Commission. This incident follows a previous breach in January 2026, which exposed employee data through vulnerabilities in mobile device management systems. The full scope of the stolen data and the method of breach remain under investigation. 45 sources 63

Extracted Entities

CERT

The full story

Extracted Entities

APT Groups (1)

Attack Types (2)

Companies (1)

Domains (1)

MITRE ATT&CK (1)

Tools (1)