European Space Agency confirms breach of “external servers”

The European Space Agency (ESA) has fessed up to a cyberattack on some of its external servers, which held unclassified data related to collaborative engineering projects—nothing top-secret, but still a headache for an outfit managing billions in space tech. Hackers boasted on BreachForums about snagging access to ESA’s JIRA and Bitbucket tools for a full week, allegedly walking away with over 200GB of goodies like source code, API tokens, and hardcoded credentials, proving that even intergovernmental giants aren’t immune to basic security slip-ups. ESA’s response? They’re knee-deep in a forensic probe, have locked down affected systems, and notified key players, though they’re keeping mum on the specifics to avoid giving attackers more ammo. If you’re an SMB or MSP running similar collaborative platforms, this is a stark reminder to audit your external servers regularly, rotate those access tokens like clockwork, and maybe skip storing credentials in plain sight—after all, if ESA can get popped, your setup might be next on the list.

Source: https://www.bleepingcomputer.com/news/security/european-space-agency-confirms-breach-of-external-servers/