European Commission Investigates Reported AWS Account Breach After Data Theft Claim
Summary
The European Commission is investigating reported access to at least one AWS account. A threat actor claims to have stolen over 350 GB of data; AWS says its services operated as designed.
Key points
- BleepingComputer reports that a threat actor accessed at least one European Commission AWS account; the Commission’s incident response team reportedly detected the intrusion quickly and is investigating.
- The actor claims to have stolen over 350 GB of data, including databases, employee information and an email server.
- The actor provided screenshots as purported proof of access, but the article does not establish the extent of any data theft.
- AWS said it did not experience a security event and that its services operated as designed.
- The actor said they would not extort the Commission but intended to leak the allegedly stolen data later.
Article Details
- Victim Organization
- European Commission
- Incident Type
- Unauthorized access to at least one European Commission AWS account; the threat actor claimed to have stolen data.
- Data Types Exposed
- European Commission employee information (access shown in screenshots; theft claimed)
- Data from an email server used by Commission employees (access shown in screenshots; theft claimed)
- Unspecified database contents (theft claimed)
- Affected Records
- Not disclosed
- Affected Data Size
- Over 350 GB, claimed by the threat actor
- Operational Impact
- The intrusion was reportedly detected quickly, and the Commission's cybersecurity incident response team is investigating. No operational disruption was reported; AWS stated that its services operated as designed.
- Ransom Or Extortion
- The threat actor said they would not extort the Commission and intended to leak the allegedly stolen data online later.
- Claim Status
- claimed