The European Commission has acknowledged a security incident. Their Europa.eu website was compromised in a cyberattack that the ShinyHunters group is claiming responsibility for.

A report by BleepingComputer initially stated on Friday that the breach impacted at least one of the Commission’s Amazon Web Services (AWS) accounts.

According to the Commission, the intrusion didn’t disrupt any Europa websites. Security measures were taken to isolate the problem and prevent further data loss.

“Preliminary findings suggest that information has been taken from the breached sites. The Commission is informing any EU bodies that might be affected. Authorities are still assessing the full extent of the damage,” a statement published on Friday said. The statement was released after BleepingComputer asked for additional details regarding the attack.

“The Commission’s internal infrastructure was unaffected. The Commission will continue to closely monitor the situation and take all appropriate steps to protect its systems and data. An analysis of the incident will be used to further develop its security processes.”

While providing limited details about the incident, the perpetrator claimed last week in a communication with BleepingComputer that they had downloaded over 350 GB of data, including databases, before their access was restricted.

Although the method is still a secret, they provided screenshots showing access to employee information as proof that they accessed the Commission’s Amazon AWS accounts.

The ShinyHunters ransomware group has added the European Commission to its dark web leak site. According to ShinyHunters, they exfiltrated “data dumps of mail servers, databases, confidential documents, contracts, and much more sensitive material.” They also released an archive of allegedly stolen files consisting of more than 90GB of data that was taken from the Commission’s cloud environment.

Recently, ShinyHunters has claimed responsibility for breaches targeting Infinite Campus, CarGurus, Canada Goose, Panera Bread, Betterment, SoundCloud, PornHub, and Match Group (owner of services like Tinder, Hinge, Meetic, Match.com, and OkCupid).

Several of these victims were exposed through a massive voice phishing operation that targeted single sign-on (SSO) accounts at Okta, Microsoft, and Google, hittingover 100 prominent organizations.

The Commission previously reported a data breach in February. This was after discovering a compromise of the mobile device management platform used for employees’ devices.

These incidents follow the Commission’s proposition of new cybersecurity legislation meant to improve the defenses of member states against state-sponsored groups and cybercriminals targeting critical infrastructure.