Find notable cyber news and cases, enriched with sources, timelines, and signals.

European Space Agency alleged 200GB data leak from external servers

Data Leak
First reported
Last updated
Happening score
H score 23
1 unique sources, 1 articles

Summary

Hide ▲

The European Space Agency (ESA) is investigating a data leak tied to external servers, which matters because the alleged exposure includes source code and credentials from collaborative engineering systems. ESA said only a very small number of servers may have been affected and that it has started a forensic analysis. A separate BreachForums claim says the actor stole over 200GB of data after accessing the services for about a week.

Related Happenings

European Commission hit by cyberattack

Incident
First: 27.03.2026 14:22 Last: 27.03.2026 14:22 Sources 1

About this happening: The **European Commission** is investigating a **security breach** after a threat actor gained access to its **Amazon cloud infrastructure**. At least **one account** used to mana...

Latest development: 03.04.2026 09:33

CERT-EU attributes the European Commission cloud breach to TeamPCP, and ShinyHunters published a 90GB archive of documents on a dark web leak site on March 28, exposing names, email addresses, and email content. CERT-EU says the exfiltrated data relates to websites hosted for up to 71 clients of the Europa web hosting service, including 42 internal European Commission clients and at least 29 other Union entities, and no websites were taken offline.

Timeline

  1. 05.01.2026 12:15 1 articles · 4mo ago

    Threat actor claims compromise of ESA external services on December 18

    Exploitation Observed

    A BreachForums threat actor claimed compromise of the European Space Agency (ESA) on December 18 after about a week of access to its services, alleging theft of over 200GB of data and dumping of private Bitbucket repositories, including source code, CI/CD pipelines, API and access tokens, confidential documents, configuration, Terraform and SQL files, and hardcoded credentials.

    Show sources
  2. 05.01.2026 12:15 2 articles · 4mo ago

    ESA begins forensic analysis of external servers and secures devices

    Technical Analysis Update

    ESA said it was aware of a recent issue involving servers outside its corporate network, had started a forensic analysis, and believed only a very small number of external servers may have been impacted. ESA said the affected servers support unclassified collaborative engineering activities within the scientific community, that relevant stakeholders had been informed, and that it had implemented measures to secure any potentially affected devices.

    Show sources