Europe's Cyber Agency Blames Hacking Gangs for Massive Data Breach and Leak
Europe's cybersecurity authority has pointed the finger at two separate criminal hacking groups following a significant data breach targeting the European Commission, in what is shaping up to be one of the most serious cyber incidents to hit EU institutions in recent memory.
CERT-EU, the cybersecurity body responsible for protecting European Union institutions, agencies, and bodies, has attributed the initial intrusion to a cybercrime group known as TeamPCP. The agency determined that this group was responsible for carrying out the hack that compromised systems within the European Commission.
In a further development, CERT-EU identified the notorious hacking collective ShinyHunters as the group responsible for subsequently leaking the stolen data online. The involvement of two distinct criminal organizations suggests a possible collaboration or handoff arrangement between the groups, a tactic that has become increasingly common in the cybercriminal underworld.
ShinyHunters has built a formidable reputation in the cybersecurity world, having previously been linked to numerous high-profile data breaches affecting major corporations and organizations across the globe. The group is well known for obtaining stolen data and making it publicly available, often causing significant reputational and operational damage to affected organizations.
The breach represents a serious challenge for EU institutions, which handle vast amounts of sensitive governmental, diplomatic, and administrative data. Cyberattacks targeting European bodies have grown in frequency and sophistication in recent years, with state-sponsored actors and independent criminal gangs alike increasingly setting their sights on high-value institutional targets.
CERT-EU's identification of the responsible parties marks an important step in the ongoing investigation, though the full scope of the breach and the extent of data compromised remain subjects of active inquiry. Authorities are expected to continue their assessment as the situation develops.
