European Commission Investigating Data Breach Linked to Amazon Cloud Hack

Post Views: 13

The European Commission Investigates Cloud Infrastructure Breach

On March 27, 2026, the European Commission announced that it was investigating a security breach involving unauthorized access to its Amazon cloud infrastructure.

Background Information

The breach affected at least one account used to manage the compromised cloud infrastructure.
The exact nature of the breach remains unclear, but the Commission’s cybersecurity incident response team is currently conducting an investigation.

According to sources familiar with the matter, the threat actor responsible for the breach contacted BleepingComputer, claiming to have accessed over 350 GB of data, including multiple databases.

Screenshots provided by the threat actor appear to confirm their claim, showcasing sensitive information belonging to European Commission employees and servers used by Commission staff.

Previous Similar Incidents

In February, the Commission reported a data breach after discovering on January 30 that its mobile device management platform had been hacked.
This breach is believed to be linked to similar attacks targeting other European institutions, such as the Dutch Data Protection Authority and Valtori, a government agency of Finland’s Ministry of Finance.

Cybersecurity Measures

The Commission proposed new cybersecurity legislation on January 20 to strengthen defenses against state-sponsored actors and cybercrime groups targeting Europe’s critical infrastructure.
Last week, the Council of the European Union imposed sanctions on three Chinese and Iranian companies for orchestrating cyberattacks against the critical infrastructure of member states.

Related News

The Commission also disclosed another data breach in February, which affected employees’ personal data, following a discovery on January 30 that the mobile device management platform used to manage its staff’s devices had been hacked.
This incident appears to be linked to similar attacks targeting other European institutions that exploit code-injection vulnerabilities in Ivanti Endpoint Manager Mobile (EPMM) software.

Recent security breaches highlight the ongoing challenge faced by European institutions in protecting themselves against sophisticated cyber threats. As the Commission continues its investigation into the current breach, it remains to be seen what measures will be taken to address these vulnerabilities and prevent future incidents.