EU cyber agency attributes major data breach to TeamPCP hacking group

CERT-EU attributes a March 19 compromise of the European Commission’s AWS account to TeamPCP via a malicious Trivy supply-chain update; attackers exfiltrated approximately 92 GB of compressed data (including names, email addresses and some email content) affecting 42 internal clients and at least 29 EU entities, and portions of the stolen data later appeared on the ShinyHunters forum.