Back Feeds2.Feedburner

Trivy supply chain attack enabled European Commission cloud breach

Feeds2.Feedburner •Zeljka Zorz • April 3, 2026

CERT-EU confirmed that ShinyHunters are behind the recent breach of the cloud infrastructure underpinning websites of the European Commission, and that they stole and subsequently leaked approximately 340 GB of data. “Analysis of the published dataset has so far confirmed the presence of personal data, including lists of names, last names, usernames, and email addresses, predominantly from the European Commission’s websites but potentially pertaining to users across multiple Union entities,” European Union’s CERT said. “The … More →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

European Commission Cyberattack Compromises AWS Cloud Infrastructure The European Commission confirmed a cyberattack on March 24, 2026, affecting its cloud infrastructure on the Europa.eu platform. Hackers claimed to have stolen over 350GB of data, including sensitive information related to Commission employees and internal databases. The breach was reportedly facilitated through the compromise of at least one Amazon Web Services (AWS) account. The Commission's internal systems were not affected, and immediate containment measures were implemented to mitigate risks. The attackers have stated they will leak the stolen data rather than extort the Commission. This incident follows a previous breach in January 2026, which exposed employee data through vulnerabilities in mobile device management systems. The full scope of the stolen data and the method of breach remain under investigation. 45 sources 63

Extracted Entities

Trivy supply chain attack enabled European Commission cloud breach

The full story

Extracted Entities

Attack Types (2)

Companies (1)

MITRE ATT&CK (1)

Tools (1)