European Space Agency confirms data breach impacted external servers
The Paris-headquartered space exploration agency has confirmed that attackers may have breached a “very small number” of its external servers.
ESA data breach
The Paris-headquartered space exploration agency has confirmed that attackers may have breached a “very small number” of its external servers.
Attackers announced the alleged breach in mid-December, claiming that they had obtained 200GB of data over a period of a week while roaming the agency’s networks. The post was uploaded to a popular data leak forum, which is used to exchange stolen details.
The perpetrator stated that they’ve obtained sensitive European Space Agency (ESA) details, including source code, access tokens, configuration files, and hardcoded credentials.
Skilled attackers could utilize the stolen details to infiltrate the organizations' systems and move laterally, gaining further foothold in linked systems. Tokens and credentials could be utilized to access admin systems, spreading the potential exposure to threat actors.
Meanwhile, the ESA announced that it was aware of a “recent cybersecurity issue.” According to the agency, the attack impacted servers outside ESA’s corporate networks.
“Our analysis so far indicates that only a very small number of external servers may have been impacted,” ESA said in a statement.
ESA is aware of a recent cybersecurity issue involving servers located outside the ESA corporate network. We have initiated a forensic security analysis—currently in progress—and implemented measures to secure any potentially affected devices.
undefined European Space Agency (@esa) December 30, 2025
Our analysis so far indicates that…
According to the agency, the impacted instances contained collaborative engineering activities within the scientific community, and all impacted parties were informed about the cybersecurity incident.
ESA is a major international organization for space exploration, with over 2,500 staff members under its umbrella and an annual budget exceeding $9 billion. In 2005, ESA's Huygens spacecraft landed on Saturn's Moon Titan, becoming the farthest landing from Earth a spacecraft has ever made.
In 2023, ESA launched the Jupiter Icy Moons Explorer (Juice) to explore three icy moons of Jupiter: Ganymede, Callisto, and Europa. The large moons are of particular interest because they are believed to house liquid water under a thick ice crust.
Unlock more exclusive Cybernews content on YouTube.