Connect with us

Tech

Europe’s cyber agency blames hacking gangs for massive data breach and leak

The European Union’s cybersecurity agency said Thursday that a recent hack and data breach at the EU’s executive body was the work of a cybercriminal group known as TeamPCP. 

In a new report, CERT-EU also reported that the hackers stole around 92 gigabytes of compressed data from a compromised Amazon Web Services (AWS) account used by the bloc’s executive, the European Commission, which included personal data containing names, email addresses, and the contents of emails. 

The breach affected the cloud infrastructure of the Commission’s Europa.eu platform, which member states use to host websites and publications of the bloc’s institutions and agencies.

CERT-EU wrote that the data of at least 29 other EU entities may be affected, and that dozens of internal European Commission clients could have had data stolen as well. 

The stolen data was then posted online by another hacking group, the notorious ShinyHunters. 

While the size of the data breach is itself notable, the cyber agency’s attribution blaming two separate hacking groups for the same incident is unusual. A member of ShinyHunters told TechCrunch in an online chat that they had stolen some of the data that TeamPCP had previously taken in earlier attacks, and then leaked it.

TeamPCP could not be reached for comment.

CERT-EU said that the breach originated on March 19 when hackers acquired a secret API key associated with the European Commission’s AWS account, following an earlier hack targeting the open source security tool Trivy. The Commission inadvertently downloaded a copy of the compromised Trivy tool following the project’s recent breach, allowing the hackers to steal its secret API key and use that access to pivot to obtain data stored in the Commission’s AWS account.

While the service said it’s still analyzing the data published online, close to 52,000 files contain sent email messages. CERT-EU said the majority of these emails are automated with little to no content, but emails that bounced back with an error “may contain the original user-submitted content, posing a risk of personal data exposure.”

CERT-EU said it is already in contact with affected organizations. 

Contact Us

Do you have more information about this breach? Or other cyberattacks? From a non-work device, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, or via Telegram and Keybase @lorenzofb, or email.

A spokesperson for the European Commission told TechCrunch that the body is closed until next week, and would respond to a request for comment then. 

Besides the Trivy breach, TeamPCP has been linked to ransomware attacks and crypto-mining campaigns, says Aqua Security, which develops Trivy. The hackers have more recently been behind a systematic campaign of supply chain attacks compromising other open source security projects, according to Palo Alto Networks Unit 42.

By targeting developers with keys to access sensitive systems, the hackers “then have the ability to hold compromised organizations for ransom, demanding extortion payments,” Unit 42 wrote.

This story was updated to include comments from a member of ShinyHunters.

source

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

TechCrunch Mobility: ‘A stunning lack of transparency’

Welcome back to TechCrunch Mobility — your central hub for news and insights on the future of transportation. To get this in your inbox, sign up here for free — just click TechCrunch Mobility!

You might recall the congressional hearing last month that sparked criticism against Waymo over its use of remote assistance workers in the Philippines. We have covered that issue extensively. You can read about the company’s remote assistance and road assistance teams here and here

Waymo tends to get the most attention because, well, those robotaxis are now operating commercially in 10 U.S. cities, with more coming soon. But the issue of remote assistance is not a Waymo issue. It’s an autonomous vehicle technology issue. 

A new report from Sen. Ed Markey (D-MA) makes my point. 

Markey sent letters to seven U.S. companies — Aurora, May Mobility, Motional, Nuro, Tesla, Waymo, and Zoox — working on autonomous vehicle technology with a list of questions. He wanted to know how often these companies’ vehicles relied on input from remote staff. 

They all refused to say, according to the results of Markey’s investigation. Markey said it was a “stunning lack of transparency from the AV companies around their use of remote assistance operators to help guide their AVs.”

You can read senior reporter Sean O’Kane’s article, which digs into the issue and includes the rather mute responses from the companies. (TechCrunch reached out to all of them.) One interesting admission from Tesla: The company said its remote assistance workers are authorized to temporarily assume direct vehicle control (a very different thing than “remote assistance”) as a final escalation maneuver.

Techcrunch event

San Francisco, CA
|
October 13-15, 2026

But here’s the thing — this is not going away. And silence will not defuse the matter. If anything, Markey seems more motivated than ever to get answers. He is now calling on the National Highway Traffic Safety Administration to investigate companies’ use of remote assistance workers and said he is “working on legislation to impose strict guardrails on AV companies’ use of remote operators.”

A little bird

blinky cat bird green
Image Credits:Bryce Durbin

Nothing this week that we have been able to verify. Send us tips! Have one? Email Kirsten Korosec at kirsten.korosec@techcrunch.com or my Signal at kkorosec.07, or email Sean O’Kane at sean.okane@techcrunch.com.

Deals!

money the station
Image Credits:Bryce Durbin

It seems like just last week I was writing about Uber being everywhere, all at once. And I see it is still a trend, although this time it isn’t directly related to autonomous vehicles. 

Uber said it is buying Berlin-based startup Blacklane, which provides on-demand, black-car chauffeur services, as the ride-hail giant expands deeper into luxury and executive travel services. Blacklane, which was founded in 2011, had raised more than $100 million to date from rental car company Sixt, Mercedes-Benz, and Alfahim, a conglomerate in the UAE.

The timing of the acquisition is notable. It comes just a few weeks after Uber announced the launch of Uber Elite, a chauffeur service that also offers a bunch of luxury offerings like airport meet-and-greets and in-vehicle amenities. 

Other deals that got my attention …

Manna Air Delivery, a consumer drone delivery startup based in Ireland, raised $50 million from ARK Invest, the Ireland Strategic Investment Fund, Schooner Capital, Coca-Cola HBC, and Molten Ventures.

Saronic Technologies, an autonomous military ship developer based in Austin, raised $1.75 billion in a Series D funding round led by Kleiner Perkins. The company is now valued at $9.25 billion. Other investors include Advent International, Bessemer Venture Partners, DFJ Growth, BAM Elevate, and other new partners and recognizes the continued commitment of its existing investors, including 8VC, Caffeinated Capital, Andreessen Horowitz, Elad Gil, and Franklin Templeton.

Voltify, a startup that has developed a way to retrofit diesel locomotives with battery power, raised $30 million in seed funding co-led by Israeli venture firm Aleph and Australian miner Fortescue.

Notable reads and other tidbits

Image Credits:Bryce Durbin

Also, the micromobility company created inside Rivian that spun out last year, will work with DoorDash to develop autonomous delivery vehicles. As part of the deal, DoorDash took part in Also’s $200 million Series C funding round, which was led by Greenoaks Capital. DoorDash is getting a seat on Also’s board of directors, too.

Baidu robotaxis stalled throughout Wuhan, China, in some cases trapping passengers for up to two hours due to system failure. 

GM is ramping up its efforts to improve its advanced driver-assistance system, Super Cruise. CEO Mary Barra posted on LinkedIn that GM has started supervised testing of its next-gen automated driving system on public highways in California and Michigan.

“Soon, more than 200 supervised and manual test vehicles will be in live traffic, with trained drivers ready to take over at any time. This data will guide future updates to strengthen our autonomous capabilities,” she wrote.

Lucid issued a recall for more than 4,000 Gravity SUVs after discovering a problem with the seat belts.

The National Highway Traffic Safety Administration reported that traffic deaths fell 6.7% to 36,640 in 2025 from the prior year. This is the second-lowest traffic fatality rate in recorded history at 1,10 fatalities per 100 million vehicle miles traveled, according to the NHTSA.

All of those long TSA lines are prompting airlines to catch up and adapt. For instance, United Airlines has updated its mobile app to show TSA wait times at select airports.

The Subaru-Toyota partnership keeps cranking out EVs. At the New York Auto Show, Subaru introduced the all-electric Gateway, a three-row SUV that is essentially a rebadged Toyota Highlander EV

Tesla’s Q1 sales figures show its cheaper vehicles aren’t helping it turn around declining sales. (Some legacy automakers have seen EV sales plummet.) That seems to have affected Tesla’s workforce numbers at its Austin, Texas, factory, which dropped 22% in 2025. Meanwhile, I riff on the changing of the guard over at Tesla (and, no, I am not referring to the string of executive departures there, although that is interesting). CEO Elon Musk shared that production of the Tesla Model S and X has ended, a milestone that marks the shift away from building cars designed for people to drive and toward robots and self-driving cars.  

Toyota’s Woven Capital has appointed a new CIO and COO in a push to find the “future of mobility.”

Uber and Chinese autonomous vehicle company WeRide launched robotaxi operations without a human safety operator in Dubai as part of a broader expansion in the Middle East.

Waymo’s robotaxi service is now live at San Antonio International, its fourth major airport. Meanwhile, Wired looked at Waymo’s school bus problem (meaning the investigation into the illegal behavior of its robotaxis around school buses). The article provides new details on how the Austin School District tried to help Waymo solve the problem. It didn’t work.

One more thing …

My podcast, the Autonocast, spent some time talking with Ashu Rege, DoorDash’s VP of Autonomy. We recorded the episode prior to the Also-DoorDash announcement, which makes his comments about the company’s strategy all the more interesting. Check out the episode here.

source

Continue Reading

Tech

Copilot is ‘for entertainment purposes only,’ according to Microsoft’s terms of use

AI skeptics aren’t the only ones warning users not to unthinkingly trust models’ outputs — that’s what the AI companies say themselves in their terms of service.

Take Microsoft, which is currently focused on getting corporate customers to pay for Copilot. But it’s also been getting dinged on social media over Copilot’s terms of use, which appear to have been last updated on October 24, 2025.

“Copilot is for entertainment purposes only,” the company warned. “It can make mistakes, and it may not work as intended. Don’t rely on Copilot for important advice. Use Copilot at your own risk.”

A Microsoft spokesperson told PCMag that the company will be updating what they described as “legacy language.”

“As the product has evolved, that language is no longer reflective of how Copilot is used today and will be altered with our next update,” the spokesperson said.

Tom’s Hardware noted that Microsoft isn’t the only company using this kind of disclaimer for AI.  For example, both OpenAI and xAI caution users that they should not rely on their output as “the truth” (to quote xAI) or as “a sole service of truth or factual information” (OpenAI).

source

Continue Reading

Tech

Polymarket took down wagers tied to rescue of downed Air Force officer

A Democratic congressman had harsh criticism for Polymarket for allowing users to bet on the date the United States would confirm the rescue of Air Force service members shot down over Iran.

In a social media post on Friday, Representative Seth Moulton wrote, “They could be your neighbor, a friend, a family member. And people are betting on whether or not they’ll be saved. This is DISGUSTING.” (President Donald Trump announced early Sunday that the second service member, a weapons system officer, has been rescued.)

Moulton also described Polymarket as a “dystopian death market” and noted that Donald Trump Jr. is an investor. The congressman recently banned his staff from participating in prediction markets like Polymarket and Kalshi. 

Polymarket responded that it had taken the market down “immediately” for not meeting the company’s integrity standards.

“It should not have been posted, and we are investigating how this slipped through our internal safeguards,” the company said.

Polymarket previously saw hundreds of millions of dollars traded on contracts tied to the bombing of Iran by the United States and Israel.

source

Continue Reading