EU Says Early Findings Suggest Data Was Taken From Europa Websites

Summary
The European Commission says early findings suggest data was taken from websites hosted on Europa.eu cloud infrastructure. It contained the intrusion, kept the sites online and says internal administrative systems were unaffected.
Key points
- The Commission says it discovered an attack on the cloud infrastructure hosting Europa[.]eu on March 24.
- Early investigation findings suggest data was taken from affected websites; the full impact remains under investigation.
- The Commission says it contained the intrusion and kept Europa websites online.
- The Commission says its internal administrative and decision-making systems were not affected.
- The Commission is notifying potentially affected Union entities and using forensic findings to strengthen its defenses and Cyber Emergency Mechanism.
Article Details
- Victim Organization
- European Commission
- Victim Domain
- Europa.eu
- Incident Type
- Cyber-attack on cloud infrastructure hosting the Europa.eu platform, with early investigation findings suggesting data exfiltration
- Data Types Exposed
- Data from affected websites; specific data types not disclosed
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- The Europa websites remained online. The Commission reported that its internal administrative and decision-making systems were not affected. The intrusion was contained, and potentially affected Union entities are being notified.
- Claim Status
- claimed
