Europecar Gitlab Breach (Incident)

A threat actor breached Europcar Mobility Group's GitLab, stealing mobile app source code, ~9,000 SQL files, 269 .env files containing credentials, and other configuration/cloud information, then attempted to extort the company by threatening to publish 37GB of data. Europcar confirmed some repositories were not affected, is assessing impact, notifying affected users (up to 200,000 names/emails from Goldcar and Ubeeqo), and has informed the data protection authority; screenshots from the attacker indicate employee credentials were present in the exfiltrated data.