European Commission Confirms Cloud Data Breach

The European Commission confirmed a March 24 breach of cloud infrastructure hosting Europa.eu; extortion group ShinyHunters claims to have exfiltrated ~350GB of sensitive data (emails, DKIM keys, NextCloud files, SSO directory data and employee PII). The Commission says internal systems were not affected, has contained the incident and notified affected Union entities, while researchers warn of identity risk, secondary spear-phishing and potential diplomatic impact.