European Commission, other EU orgs recently hit by cyber-attack

The European Commission and several other European Union organizations were hit by a cyberattack in March, according to a European Commission spokesperson.

As revealed by the spokesperson, the “IT security incident” impacted multiple EU institutions, bodies, or agencies’ IT infrastructure.

“We are working closely with CERT-EU, the Computer Emergency Response Team for all EU institutions, bodies and agencies and the vendor of the affected IT solution,” the spokesperson told BleepingComputer.

“The Commission has set up a 24/7 monitoring services and is actively taking mitigating measures.”

No “major information breach” was detected so far, although forensic analysis of the intrusion attempts is still in the initial phase, and no conclusive information is available.

“Let me use this occasion to recall that we take cybersecurity very seriously and apply strict policies to protect our infrastructures and devices, the spokesperson added. “We investigate every incident.”

No information is available at the moment about the nature of the incident or the identity of the attackers behind the attack.

Although not confirmed by the European Commission spokesperson, Bloomberg reported earlier that the attack hit the EU organizations last week.

Other EU orgs targeted in recent months

Last month, the European Banking Authority (EBA) had to take down all email systems after their Microsoft Exchange Servers were breached as part of the ongoing attacks targeting commercial and government organizations worldwide.

In January, the European Medicines Agency (EMA) said that Pfizer/BioNTech COVID-19 vaccine data stolen from its servers in December was leaked online.

In a subsequent update, EMA revealed that some of the vaccine candidate data was doctored by threat actors before being leaked online to undermine the public’s trust in COVID-19 vaccines.

IBM X-Force researchers also warned in December of threat actors targeting organizations associated with the COVID-19 vaccine cold chain, including the European Commission’s Directorate-General for Taxation and Customs Unio