The European Commission has confirmed a major cyber attack that compromised cloud infrastructure hosting its Europa.eu web presence. The breach, which has been contained, involved a threat actor accessing over 350GB of data before the Commission could respond. Early findings suggest data was exfiltrated from Europa websites, with affected Union entities being notified.

According to reports, the attacker gained access through one of the Commission's Amazon Web Services accounts, targeting both Europa sites and employee data. This marks the second breach in recent months, following a similar February incident that also impacted employee information. The Commission's investigation remains ongoing, with details about the initial intrusion still undisclosed.

While concerning, these breaches appear less severe than the Salt Typhoon hack that affected US telecom companies in 2024, which compromised data from government officials and political campaign staff. The European Commission had introduced a new Cybersecurity Package in January 2026 to address such vulnerabilities, focusing on managing risks from potentially dangerous companies in telecom supply chains.