European Commission Breach

The European Commission, the executive arm of the European Union, said in late March 2026 that a cyber incident affected parts of the public cloud infrastructure supporting the europa.eu platform, after the ShinyHunters extortion group claimed responsibility and began advertising stolen data on its leak site. The group alleged that it had taken more than 350 GB of material, describing the haul as including mail-server dumps, databases, confidential documents and contracts. The Commission, however, said its investigation at that stage found no evidence that its internal systems had been compromised, framing the incident as one affecting public web infrastructure rather than core internal networks.

Our review of the leaked material suggests the incident was not limited to a narrowly scoped public-facing website environment. The dataset appears to include roughly 100,000 private email records along with other non-public material, which is difficult to reconcile with claims that only a public web platform was affected. While the exact system boundary still needs to be established, the contents strongly indicate exposure of internal or internally connected resources.