European Commission Investigates Reported Amazon Cloud Account Breach
Summary
The European Commission is investigating reported unauthorized access to an Amazon cloud account used for its infrastructure. A threat actor claims to have stolen over 350 GB and shared screenshots; the theft and any link to Ivanti vulnerabilities remain unconfirmed.
Key points
- Sources familiar with the incident told BleepingComputer that at least one Amazon cloud account used to manage Commission infrastructure was accessed without authorization.
- A threat actor claims to have stolen over 350 GB of data, including multiple databases; the Commission has not publicly detailed the incident.
- The actor provided screenshots reportedly showing access to employee information and an internal email server.
- The actor says they do not plan to extort the Commission and intend to leak the data later; the claimed theft is not independently confirmed in the article.
- The Commission's incident response team is investigating. The article does not establish that Ivanti EPMM vulnerabilities caused this cloud-account incident.
Article Details
- Victim Organization
- European Commission
- Incident Type
- Unauthorized access to at least one Amazon cloud account used to manage Commission infrastructure; the threat actor claims data theft.
- Data Types Exposed
- European Commission employee information (access shown in screenshots; theft claimed)
- Database contents (theft claimed; contents unspecified)
- Affected Records
- Unknown
- Affected Data Size
- The threat actor claims to have stolen over 350 GB of data.
- Operational Impact
- The breach was reportedly detected quickly, and the Commission's incident response team is investigating. No further operational impact is reported.
- Ransom Or Extortion
- The threat actor told BleepingComputer it would not extort the Commission and instead intends to leak the allegedly stolen data later.
- Claim Status
- claimed
Vendors
AmazonThe European Commission is investigating a security breach after a threat actor accessed at least one Amazon cloud account used to manage its infrastructure and claims to have stolen over 350 GB of data, includingIvantiplans to leak the data, and the Commission’s incident response team is probing the incident amid related Ivanti EPMM vulnerabilities that have affected other European institutions.