A Compromised Tool Opened the Door to a 91GB European Commission Data Leak

**Executive summary:** A supply‑chain compromise of the Trivy security scanner led to theft of an AWS management API key, enabling attackers to exfiltrate ~91.7 GB compressed of European Commission data (impacting services for up to 71 clients); the dataset was published by ShinyHunters, prompting revocation of keys, notifications to regulators, and an active investigation.