European Space Agency's Servers Breached, Sensitive Data Stolen by Hackers
The European Space Agency (ESA) has suffered yet another major cybersecurity breach, with hackers claiming to have stolen highly sensitive data, including confidential documents and source code from the agency's servers. The attack is believed to have compromised 200 gigabytes of data, which includes access tokens, hardcoded credentials, and Terraform files.
According to French cybersecurity expert Seb Latom, who shared screenshots of the compromised data on X, some of the stolen information may be related to ESA's upcoming space telescope Ariel or Atmospheric Remote-sensing Infrared Exoplanet Large-survey (ARIELS), set to launch in 2029. The hackers are now offering the stolen data for sale on the BreachForums cybercrime website, posing a significant risk to space projects and potentially allowing malicious actors to reuse the code.
This is not the first time ESA's servers have been breached. In December 2024, hackers created a fake payment page on the agency's online shop, while in 2015, a hacker group gained access to several ESA websites to collect staff and subscriber information. The agency has reported multiple cybersecurity incidents, suggesting that its data security needs improvement.
The US space agency NASA has also suffered significant security breaches over the years, with one incident occurring in 2018 when hackers accessed personal information, including social security numbers, belonging to agency staff members. ESA has responded by initiating a forensic analysis and implementing measures to secure potentially affected devices. The agency has informed relevant stakeholders and promised further updates as more information becomes available.
The European Space Agency (ESA) has suffered yet another major cybersecurity breach, with hackers claiming to have stolen highly sensitive data, including confidential documents and source code from the agency's servers. The attack is believed to have compromised 200 gigabytes of data, which includes access tokens, hardcoded credentials, and Terraform files.
According to French cybersecurity expert Seb Latom, who shared screenshots of the compromised data on X, some of the stolen information may be related to ESA's upcoming space telescope Ariel or Atmospheric Remote-sensing Infrared Exoplanet Large-survey (ARIELS), set to launch in 2029. The hackers are now offering the stolen data for sale on the BreachForums cybercrime website, posing a significant risk to space projects and potentially allowing malicious actors to reuse the code.
This is not the first time ESA's servers have been breached. In December 2024, hackers created a fake payment page on the agency's online shop, while in 2015, a hacker group gained access to several ESA websites to collect staff and subscriber information. The agency has reported multiple cybersecurity incidents, suggesting that its data security needs improvement.
The US space agency NASA has also suffered significant security breaches over the years, with one incident occurring in 2018 when hackers accessed personal information, including social security numbers, belonging to agency staff members. ESA has responded by initiating a forensic analysis and implementing measures to secure potentially affected devices. The agency has informed relevant stakeholders and promised further updates as more information becomes available.