European Space Agency hit again as cybercrims claim 200 GB data up for sale

The European Space Agency confirmed a security incident affecting a small number of external servers while a threat actor has posted an offering of over 200 GB of alleged ESA data for sale on BreachForums, claiming to have stolen source code, CI/CD pipelines, API/access tokens, configuration and Terraform files, SQL files, hardcoded credentials, and private Bitbucket repository dumps; ESA is conducting forensic analysis and has taken measures to secure affected devices. The report highlights similar prior incidents against ESA resources, suggesting a recurring pattern of breaches involving externally hosted systems.