EU Commission Reports Portal Incident as ShinyHunters Claims 350 GB Data Theft

Summary

The European Commission says it contained an incident on public Europa[.]eu sites and found no evidence of internal-system compromise. ShinyHunters claims it stole over 350 GB; the data and any personal-information impact remain under investigation.

Key points

The Commission says the incident affected parts of its public Europa[.]eu web portal and that its internal infrastructure was not affected.
ShinyHunters claims it stole more than 350 GB of data, including databases, emails and internal documents, and says it posted samples on a leak site; the theft has not been independently confirmed in the article.
The Commission says its defenses detected and contained the activity and that mitigation measures did not disrupt website availability.
The Commission has not identified what data may have been accessed or whether personal information was involved.
Cybersecurity experts and relevant authorities are assessing the incident, and the Commission says it will notify affected parties.

Article Details

Victim Organization: European Commission
Victim Domain: Europa.eu
Incident Type: Cyberattack affecting parts of the public Europa.eu web portal; ShinyHunters claimed data theft.
Data Types Exposed: Databases (claimed by ShinyHunters; not verified)
Emails (claimed by ShinyHunters; not verified)
Internal documents (claimed by ShinyHunters; not verified)
Affected Records: Not disclosed; the Commission did not specify how many users could be affected.
Affected Data Size: ShinyHunters claimed more than 350 gigabytes were stolen; the claim was not verified in the article.
Operational Impact: The Commission said it detected and contained the incident and implemented mitigation measures without disrupting website availability. It reported no evidence that internal infrastructure was affected.
Ransom Or Extortion: No incident-specific ransom demand or extortion activity was reported. ShinyHunters claimed the theft and published samples on a leak site.
Claim Status: claimed

People

Thomas RegnierEuropean Commission spokesperson who described the affected public websites, the Commission's detection and containment response, and the absence of evidence that internal infrastructure was affected.

Threat Actors

ShinyHuntersClaimed responsibility for the cyberattack and alleged that it stole more than 350 gigabytes of data, including databases, emails, and internal documents; the article does not verify the alleged theft.

Vendors

Amazonof the claims, including that parts of the Europa platform are hosted on cloud infrastructure provided by Amazon, but sought to minimize the significance of the breach.