Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

European Commission

Disclosed Mar 27, 2026Confirmed

Official notice

European Commission cloud breach via Trivy-stolen AWS key hits 30 EU bodies

The European Commission confirmed data was taken from its Europa.eu web hosting cloud. CERT-EU said TeamPCP used an AWS secret stolen in the Trivy supply-chain attack to exfiltrate data affecting 71 clients including at least 29 other EU bodies, and ShinyHunters leaked about 90 GB.

What is known

People affectedNot stated in the sources we have
DisclosedMar 27, 2026
DiscoveredMar 2026
AttackSupply chain
Data exposedNamesEmailsMessagesInternal documents
SectorGovernment · BE
StatusConfirmed
Part ofTrivy (2026)

Sources

Official noticecert.europa.eu
CERT-EU: European Commission cloud breach
Newsbleepingcomputer.com
CERT-EU: European Commission hack exposes data of 30 EU entities
Newsbleepingcomputer.com
European Commission confirms data breach after Europa.eu hack

Notices filed

TotalMar 27
ResearchCount not stated

Same campaign

CheckmarxSupply chain exposed credentials and tokens, API keys and source code.Supply chainTechILApr 26CiscoSupply chain exposed source code and API keys.Supply chainTechUSUnverifiedMar 31LiteLLMMalware slipped into popular LiteLLM AI gateway package stole developer credentialsSupply chainAIUSUnverifiedMar 24Aqua SecurityTrivy scanner releases and GitHub Actions hijacked to push credential stealerSupply chainTechILUnverifiedMar 21
History of this record
Added2026-09-25
First recordedby seedSource

First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.

Everything about European Commission