In March 2026, 350 GB of data belonging to European Commission officials was stolen.

Omissions

• The 350 GB figure originates from the ShinyHunters hacker group's claim, not from an official European Commission confirmation of the volume of data exfiltrated.
• The stolen data was described by the hackers as including mail-server dumps, databases and confidential documents more broadly — not exclusively data of Commission officials; reporting that specifically notes staff names and phone numbers being compromised is partly linked to the separate January 2026 mobile-device-management incident.
• All corroborating sources are journalistic (secondary); no primary source (Commission/Eurostat) confirming the exact 350 GB volume was found.

Sources

• SecondarySecurityWeekThe ShinyHunters hacker group claimed to have stolen over 350GB of information from European Commission cloud systems; the European Commission reported a cyber intrusion and data theft.
• SecondaryBleepingComputerThe European Commission has confirmed a data breach after its Europa.eu web platform was hacked in a cyberattack claimed by the ShinyHunters group.
• SecondaryCyberInsiderThe European Commission is investigating a cyberattack on its Europa.eu platform after threat actor ShinyHunters alleged theft of 350GB of data.
• SecondaryeBuilder SecurityShinyHunters cybercriminals claim to have stolen 350GB of data from the European Commission's AWS cloud infrastructure in a March 2026 attack.
• SecondaryDataBreach.comThe group alleged that it had taken more than 350 GB of material, describing the haul as including mail-server dumps, databases and confidential documents.
• SecondaryMuyComputerProThe European Commission has confirmed that it has suffered a cyberattack, the second of 2026, affecting its cloud infrastructure and the europa.eu portal.
• SecondaryEscudo DigitalA cyberattack on the European Commission compromises the names and phone numbers of its employees; it is not yet known how many officials were affected.