EditEU Commission hit by major cyber-attack on its public website platform
The attack comes at a moment of heightened geopolitical tension, as the U.S.-Israeli military campaign against Iran triggers cascading hybrid threats across Europe
The European Commission disclosed on Friday that it suffered a significant cyber-attack on 24 March that compromised its cloud infrastructure hosting the Europa.eu public website platform.
According to the official press release, the incident was swiftly contained with no disruption to the availability of the websites and no impact on the Commission’s internal systems. However, early findings indicate that data were exfiltrated from the affected public websites, prompting notifications to potentially impacted Union entities. The Commission stated it is continuing its investigation into the full scope of the breach while enhancing cybersecurity measures.
The attack comes at a moment of heightened geopolitical tension, as the U.S.-Israeli military campaign against Iran enters its second month and triggers cascading hybrid threats across Europe. While the Commission has not publicly attributed the incident to any specific actor, its statement explicitly frames the breach within the broader context of “persistent cyber and hybrid attacks targeting essential services and democratic institutions.” This language echoes repeated EU warnings about state-sponsored cyber operations linked to regional conflicts, including those emanating from Iran and its proxies.
The Commission’s response highlights its ongoing push to bolster collective defences. The press release references key legislative pillars already in place or recently advanced: the Cybersecurity Regulation, the NIS2 Directive (which covers 18 critical sectors and mandates cross-border cooperation), the Cyber Solidarity Act (establishing a European Cyber Shield and emergency response mechanism), and the January 2026 Cybersecurity Package. These tools are designed precisely to detect and counter large-scale threats of the kind now materialising.
Independent analysts and EU officials note that such incidents are becoming more frequent as the geopolitical conflicts spill over into the cyber domain. European energy ministers met earlier this week to coordinate responses to the oil-price spike and Hormuz disruptions, while the High Representative’s office has issued multiple statements urging de-escalation and restraint from all parties in the Middle East. The Commission itself has been actively preparing member states for potential winter energy shortfalls caused by the Gulf crisis, including adjusted gas-storage targets and contingency planning.
No immediate evidence links this specific attack to Russian or Iranian actors, but the episode serves as a stark reminder of the hybrid dimension of the aggregated geopolitical crises Europe is facing.
Caption: File photo. People walk in front of the Berlaymont building, the headquarters of the European Commission, with a sign reading ‘United for our Future’ on a winter day in Brussels, Belgium, 5 January 2026. EPA/OLIVIER HOSLET
Updated: March 28, 2026 - 08:19
