The European Commission has announced that it suffered a cyber attack that affected “cloud infrastructure hosting the Commission’s web presence on the Europea.eu platform.” While the attack has been contained, Bleeping Computer reports that the threat actor claiming to be behind it was able to take over 350GB of data before the Commission addressed the issue.
“Early findings of our ongoing investigation suggest that data have been taken from [Europa] websites,” the European Commission says. “The Commission is duly notifying the Union entities who might have been affected by the incident.”
The Commission’s investigation is ongoing, and it has yet to disclose how its cloud infrastructure was breached. According to Bleeping Computer, the threat actor was able to access the Europa sites and employee data via one of the Commission’s Amazon Web Services accounts. The Commission disclosed a breach that similarly impacted employee data in February.
Both breaches appear to be less severe than the Salt Typhoon hack that impacted US telecommunications companies in 2024. Hackers reportedly gained access to data from the smartphones of members of both the Trump and Harris campaigns, and other government officials. In January 2026, the European Commission introduced a new Cybersecurity Package designed to address similar issues, in part by outlining new ways for EU states to deal with potentially risky companies in their telecom supply chains.
