alt.hn

1/1/2026 at 4:28:43 PM

European Space Agency hit again as cybercriminals claim 200 GB data up for sale

https://www.theregister.com/2025/12/31/european_space_agency_hacked/

by smurda

1/1/2026 at 6:39:14 PM

Was going to ask what's the data, but

> Compromised Data: Source Codes, CI/CD Pipelines, API Tokens, Access Tokens, Confidential Documents, Configuration Files, Terraform Files, SQL Files, Hardcoded Credentials and more!

Yeah, right. No wonder nobody bothered to buy and take a look. More of an insult to ESA, than a "data breach".

by krick

1/1/2026 at 6:42:46 PM

> Compromised Data: Source Codes, CI/CD Pipelines, API Tokens, Access Tokens, Confidential Documents, Configuration Files, Terraform Files, SQL Files, Hardcoded Credentials and more!

And who is going to buy this (useless) data exactly? (half joking)

by guessmyname

1/2/2026 at 5:55:19 AM

I'm old enough to remember being told not to put any personal information on the internet. Pretty soon, personal information will be mandatory to use the Internet. How ironic.

by johnnienaked

1/1/2026 at 5:07:37 PM

Pay them a one-way ticket into space.

by amelius

1/1/2026 at 5:50:39 PM

Shouldn't this data be public anyway?

by zb3

1/1/2026 at 6:10:46 PM

More or less. Unless it's something to do with the employee's privacy or something to that effect. Doesn't mean the criminals are the good guys here, since they're trying to make bank on it instead of releasing it to the public -- if it's something that the public has an interest in.

by ahsillyme

1/1/2026 at 6:49:08 PM

Terraform files? Seems waste of time to have to make it public.

by victorbjorklund

1/1/2026 at 7:33:34 PM

No, not really. The science products eventually become public (after 1st access right by contributing nations). But why would the API keys (for instance) ever be public?

by wtcactus

1/1/2026 at 4:51:19 PM

> didn't hear back, with an automated response informing us that the Agency's offices are closed for the New Year holiday

This is so on-brand for EU organizations.

by egorfine

1/1/2026 at 5:13:16 PM

You say that as if it's a bad thing?

by eterm

1/1/2026 at 5:54:41 PM

In this context (massive data breach) - it is.

by egorfine

1/1/2026 at 6:57:38 PM

It's noncritical infrastructure by every definition and data was already stolen, waking up a PR guy to put something on their page is a waste of everyone's time

by PunchyHamster

1/1/2026 at 6:16:36 PM

Ah yes, responding to the media during holidays will make the data crawl back to their servers!

by lillecarl

1/1/2026 at 6:32:13 PM

If this were a private business, people would be piling on and calling for the executives to face a firing squad.

by blell

1/1/2026 at 6:36:11 PM

"People" here meaning in particular the types that frequent this very message board.

by nubg

1/1/2026 at 7:38:55 PM

You can find a certain group of people to pile on for anything.

by pavel_lishin

1/1/2026 at 6:03:36 PM

What does their comms team have to do with the massive data breach?

by monkey_monkey

1/1/2026 at 7:20:36 PM

Answers. These guys can provide answers to the public.

by egorfine

1/1/2026 at 11:53:16 PM

Aviate, navigate, communicate. In that order.

ESA’s priority in this case is measuring the damage and then brokering a solution if needed. After that it should communicate to the public.

by JumpCrisscross

1/1/2026 at 7:38:38 PM

Are these answers so critical they're needed on a holiday?

by barrucadu

1/1/2026 at 7:41:01 PM

I don't know. There's nobody in the comms team to answer this question.

by egorfine

1/1/2026 at 9:31:49 PM

OK, so nothing to do with the massive data breach. But hey, you just really want to make a point about how upset you are that Europeans having decent work/life balance, so there's not point continuing to expose your little agenda.

by monkey_monkey

1/1/2026 at 9:33:04 PM

[dead]

by cindyllm

1/1/2026 at 5:21:25 PM

[flagged]

by monkey_monkey

1/2/2026 at 4:44:53 AM

National Labs are closed over the holidays in the USA too.

by dotgov