European Commission investigates cyber attack on its websites; CERT-EU publishes recommendations

On 24 March the European Commission detected a cyber-attack on its cloud infrastructure hosting Europa.eu. Early findings attribute initial access to a Trivy supply-chain compromise (publicly linked to TeamPCP), with ~91.7 GB of compressed data exfiltrated including personal data and documents; extortion group ShinyHunters later published the stolen data. The Commission contained the incident, reported internal systems were not affected, and CERT-EU warns that at least 29 other Union entities may be impacted and urges mitigation steps.