logo

European Commission breach exposed data of 30 EU entities, CERT-EU says

ID: 46b56561-6537-5f77-a8d5-034f84366c4a

STIX ID: report--46b56561-6537-5f77-a8d5-034f84366c4a

Feed Name: Security Affairs

Threat Score
90/100

Date Published: 2026-04-04

Date Updated: 2026-04-22

Author: Pierluigi Paganini

...
...

### Executive Summary CERT-EU and the European Commission confirmed a cloud breach of an AWS account used for europa.eu hosting, attributed with high confidence to the TeamPCP group via a compromised Trivy package; attackers used the stolen API key and TruffleHog to find/add credentials, perform reconnaissance, and exfiltrate data (reports of ~350GB published), impacting up to 71 hosting clients including 42 Commission entities and at least 29 other EU bodies.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.