Europe’s cyber agency blames hacking gangs for massive data breach and leak

CERT-EU reported that attackers (linked to TeamPCP) obtained a secret AWS API key after the European Commission downloaded a compromised copy of the open-source Trivy tool, allowing exfiltration of roughly 92 GB from the Commission's Europa.eu AWS account; stolen data—including personal information and about 52,000 sent-email files—was later posted online by ShinyHunters, and at least 29 other EU entities may be affected.