ESA

A threat actor using the alias '888' exfiltrated 200GB+ from ESA systems including Bitbucket repositories, API tokens, and contractor data from SpaceX, Airbus, and Thales. Criminal probe initiated.

A threat actor breached ESA's external Bitbucket and Jira servers, claiming 200 GB of source code, API tokens, credentials, and confidential mission documents. A second breach followed within weeks.