The scale of what happened may be much more serious than official reports.
Last week, the European Commission faced a cyber attack on one of its key online platforms. The incident affected cloud infrastructure, which hosts the Europa.eu web platform, through which many websites of EU institutions work. Despite the attempt to intervene, users did not notice the interruptions - the services continued to work as usual.
The attack was discovered on March 24. Immediately after the identification, the Commission’s specialists isolated the affected systems and launched risk reduction measures. According to preliminary data, the attackers could access some of the information posted on the platform’s websites. Now the agency notifies the structures of the EU, which may have been under attack, and continues to understand the details of what happened.
At the same time, the internal infrastructure of the European Commission remained outside the affected area. Critical systems and data were not affected. The team continues to monitor and simultaneously analyze the incident to strengthen the protection and prevent similar cases in the future.
The situation is unfolding against the backdrop of a general increase in cyber threats in Europe. Cyberattacks are increasingly targeting government services and democratic institutions. In response, the European Union has already built a set of measures that includes cybersecurity regulations, the NIS2 directive and the cybersoldicast law. These documents form uniform rules of protection, cover critical industries and strengthen coordination between countries.
In addition, in January 2026, the European Commission introduced a new package of initiatives aimed at strengthening collective cyber defense. It includes rapid response mechanisms to major incidents and the development of an early threat detection system. The current incident is likely to be another argument in favor of further strengthening of these measures.
Last week, the European Commission faced a cyber attack on one of its key online platforms. The incident affected cloud infrastructure, which hosts the Europa.eu web platform, through which many websites of EU institutions work. Despite the attempt to intervene, users did not notice the interruptions - the services continued to work as usual.
The attack was discovered on March 24. Immediately after the identification, the Commission’s specialists isolated the affected systems and launched risk reduction measures. According to preliminary data, the attackers could access some of the information posted on the platform’s websites. Now the agency notifies the structures of the EU, which may have been under attack, and continues to understand the details of what happened.
At the same time, the internal infrastructure of the European Commission remained outside the affected area. Critical systems and data were not affected. The team continues to monitor and simultaneously analyze the incident to strengthen the protection and prevent similar cases in the future.
The situation is unfolding against the backdrop of a general increase in cyber threats in Europe. Cyberattacks are increasingly targeting government services and democratic institutions. In response, the European Union has already built a set of measures that includes cybersecurity regulations, the NIS2 directive and the cybersoldicast law. These documents form uniform rules of protection, cover critical industries and strengthen coordination between countries.
In addition, in January 2026, the European Commission introduced a new package of initiatives aimed at strengthening collective cyber defense. It includes rapid response mechanisms to major incidents and the development of an early threat detection system. The current incident is likely to be another argument in favor of further strengthening of these measures.
