logo

Hacker Claims European Space Agency Breach, Selling 200GB of Data

ID: b0583473-bbed-5b44-87b4-4e2f18e092b6

STIX ID: report--b0583473-bbed-5b44-87b4-4e2f18e092b6

Feed Name: HackRead

Threat Score
70/100

Date Published: 2025-12-31

Date Updated: 2026-04-22

Author: Waqas

...
...

A threat actor known as "888" claims to have stolen more than 200 GB of internal ESA data — including source code, CI/CD pipelines, infrastructure definitions, credentials, Bitbucket and Jira artifacts, and proprietary engineering documents — and is advertising the dataset for sale on DarkForums for Monero. Shared screenshots show detailed internal hosts, configuration files, project hierarchies and partner-branded technical documents; however, the breach and dataset authenticity were not independently confirmed and the ESA had not issued a public statement at the time of reporting.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.