European Space Agency alleged 200GB data leak from external servers
Data Leak
Summary
Hide ▲
Show ▼
The European Space Agency (ESA) is investigating a data leak tied to external servers, which matters because the alleged exposure includes source code and credentials from collaborative engineering systems. ESA said only a very small number of servers may have been affected and that it has started a forensic analysis. A separate BreachForums claim says the actor stole over 200GB of data after accessing the services for about a week.
Related Happenings
European Commission hit by cyberattack
Incident
First: 27.03.2026 14:22
Last: 27.03.2026 14:22
Sources 1
About this happening:
The **European Commission** is investigating a **security breach** after a threat actor gained access to its **Amazon cloud infrastructure**. At least **one account** used to mana...
European Commission hit by cyberattack
IncidentAbout this happening: The **European Commission** is investigating a **security breach** after a threat actor gained access to its **Amazon cloud infrastructure**. At least **one account** used to mana...
Latest development: 03.04.2026 09:33
CERT-EU attributes the European Commission cloud breach to TeamPCP, and ShinyHunters published a 90GB archive of documents on a dark web leak site on March 28, exposing names, email addresses, and email content. CERT-EU says the exfiltrated data relates to websites hosted for up to 71 clients of the Europa web hosting service, including 42 internal European Commission clients and at least 29 other Union entities, and no websites were taken offline.
Timeline
-
05.01.2026 12:15 1 articles · 4mo ago
Threat actor claims compromise of ESA external services on December 18
Exploitation ObservedA BreachForums threat actor claimed compromise of the European Space Agency (ESA) on December 18 after about a week of access to its services, alleging theft of over 200GB of data and dumping of private Bitbucket repositories, including source code, CI/CD pipelines, API and access tokens, confidential documents, configuration, Terraform and SQL files, and hardcoded credentials.
Show sources
- European Space Agency Confirms Server Breach — www.infosecurity-magazine.com — 05.01.2026 12:15
-
05.01.2026 12:15 2 articles · 4mo ago
ESA begins forensic analysis of external servers and secures devices
Technical Analysis UpdateESA said it was aware of a recent issue involving servers outside its corporate network, had started a forensic analysis, and believed only a very small number of external servers may have been impacted. ESA said the affected servers support unclassified collaborative engineering activities within the scientific community, that relevant stakeholders had been informed, and that it had implemented measures to secure any potentially affected devices.
Show sources
- European Space Agency Confirms Server Breach — www.infosecurity-magazine.com — 05.01.2026 12:15
- European Space Agency Confirms Server Breach — www.infosecurity-magazine.com — 05.01.2026 12:15