European Commission discloses breach that exposed staff data

The European Commission and multiple European government agencies reported breaches linked to active zero-day exploitation of Ivanti Endpoint Manager Mobile (EPMM) vulnerabilities (CVE-2026-1281 and CVE-2026-1340). Attackers appear to have accessed staff personal and work contact data (names, phone numbers, business emails), with evidence of over 50 compromised EPMM servers and potentially up to 50,000 affected users in some organizations; incidents were contained quickly but investigations and disclosures are ongoing.