European Space Agency confirms data breach


MILAN — The European Space Agency has confirmed a security breach of unclassified material from science servers following reports on social media.

A threat actor claimed to have compromised ESA systems and to have leaked roughly 200 gigabytes of data. According to screenshots shared on X by French cybersecurity professional Seb Latom, the actor alleges they were able to steal source code, API tokens, access tokens for multiple ESA systems, confidential documents, system and application configuration files and hardcoded credentials such as embedded passwords and authentication secrets.

Read more…
Source: Space News


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • French prosecutors probe Apple’s Siri following complaint

    October 6, 2025

    French prosecutors said on Monday they are investigating tech giant Apple’s, opens new tab voice assistant Siri after receiving a complaint from a tech researcher accusing the company of illicit data collection. The probe, which was first reported by the news website Politico, has been entrusted to a police force specialised in cybercrime, the prosecutors’ office ...

  • UK: Renault and Dacia customer data stolen in third party cyber attack

    October 2, 2025

    Renault has become the most recent victim of a cyber attack. Customers of the French firm and its sister brand Dacia have been warned that their personal data, including postal addresses and emails, has been stolen by hackers. In an email sent out to customers, Renault said: “We are very sorry to inform you about a ...

  • UK government tries again to access encrypted Apple customer data

    October 1, 2025

    The U.K. government is still trying to gain access to encrypted iCloud data, according to the Financial Times, after British officials allegedly filed a new secret order demanding Apple build a backdoor. On Wednesday, the British newspaper reported that the U.K. Home Office sent an order to Apple earlier in September requesting that the tech giant ...

  • HSBC warns UK business banking customers of third-party data breach

    September 30, 2025

    HSBC has warned business banking customers that personal identification documents submitted during account applications may have been compromised following unauthorised access to a third-party platform. In an email sent to customers earlier this month, the bank confirmed that identity documents, images and contact details provided when opening a business account were exposed in the breach. HSBC ...

  • UK: Jaguar Land Rover rescued with £1.5bn Government loan after cyber attack

    September 28, 2025

    The Government has agreed to support Jaguar Land Rover (JLR) with a loan guarantee expected to unlock £1.5billion to support its supply chain. JLR suspended production at its UK factories following the cyber attack on 31 August, including the one in Halewood on Merseyside. The announcement follows the Business Secretary’s visit to JLR and supply chain ...

  • UK: Harrods’ customers details stolen in data breach

    September 27, 2025

    Harrods has warned some of its customers that their personal data may have been taken in an IT systems breach, months after it was targeted by a suspected cyber attack in May. The luxury department store said customer names and contact details have been taken after one of its third-party provider systems was compromised. It said ...