Major cyber attack on European Union cloud system, sensitive data leak

A major cyberattack on the European Union’s cloud infrastructure has led to hackers gaining access to emails, user data and internal records, raising serious security concerns.

According to a CERT-EU report, attackers stole around 92GB of data through an infected Amazon Web Services account, which was connected to the European Commission’s Europa.eu platform.

The stolen data included users’ names, email addresses and the full content of emails, which increased the risk of exposing not only official contacts but also personal information.

The investigation has revealed that at least 29 European institutions were affected by the attack, while data from several internal users was also present in the same system.

According to experts, it was a supply chain attack, in which hackers first targeted an open source security tool, obtained a secret API key from there and then used it to enter the cloud system and extract data.

The stolen data was later published online by the notorious hacking group ShinyHunters, which has been involved in major data leaks before.

Experts say the incident is a warning for global cybersecurity and that organizations need to strengthen their systems.