European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack Affecting EU Entities
The European Commission (EC) has confirmed a significant data breach involving over 300GB of data stolen from its AWS environment. This breach was linked to a compromised API key in the Trivy supply chain attack. The incident, which occurred on March 24, was initially disclosed on March 27. Hackers accessed the AWS account, part of the backend for the Europa.eu hosting service, which supports public websites for the EC and other European Union entities. The breach was facilitated by a compromised version of Trivy, a vulnerability scanner, which the EC had received through normal software update channels. The attackers, identified as the TeamPCP hacking group, used the compromised AWS key to create and attach a new access key to a user account, allowing them to conduct reconnaissance and exfiltrate data. The stolen data, which includes personal information such as names, email addresses, and usernames, was later added to a Tor-based leak site by the ShinyHunters extortion group. 
