A recent breach of the European Commission's cloud infrastructure exposed sensitive data from at least 30 EU entities, with the Computer Emergency Response Team for the EU (CERT-EU) attributing the attack to the TeamPCP threat group1. The incident, which was detected on March 24, involved the compromise of the Commission's Amazon cloud environment, hosting its Europa.eu websites. Although the breach was quickly contained, it has significant implications for the security of EU data. The fact that a threat group was able to infiltrate the Commission's cloud infrastructure raises concerns about the evolving nature of cyberattacks and the potential for similar breaches in the future. The exposure of data from 30 EU entities underscores the need for enhanced security measures to protect sensitive information. This breach matters to practitioners because it signals a potential shift in attack methods, which could have downstream regulatory and supply-chain effects.