The European Commission is investigating a security breach after a threat actor accessed at least one Amazon cloud account used to manage its infrastructure and claims to have stolen over 350 GB of data, including multiple databases. The attacker provided screenshots, said it will not extort the Commission but plans to leak the data, and the Commission’s incident response team is probing the incident amid related Ivanti EPMM vulnerabilities that have affected other European institutions. #EuropeanCommission #IvantiEPMM
Keypoints
- The Commission detected unauthorized access to at least one Amazon cloud account used for its infrastructure.
- The threat actor claims to have stolen over 350 GB of data, including multiple databases.
- The attacker provided screenshots showing access to employee information and an internal email server.
- The actor says it will not extort the Commission but intends to leak the stolen data later.
- The incident is under investigation and may be linked to Ivanti EPMM vulnerabilities that affected other European institutions.