At a Glance
- ESA science servers breached, 200 GB of data stolen.
- Hacker group selling data on BreachForums.
- Potential impact on upcoming Ariel telescope launch.
- Why it matters: Sensitive code and documents now in cybercrime market, threatening space project security.
In a recent security incident, the European Space Agency confirmed that a hacker group has stolen 200 GB of data from its science servers, including source code and confidential documents. The breach, which the agency says affected only a handful of external servers, has already made its way to the cybercrime marketplace, raising concerns over the safety of ESA’s upcoming projects.
Scope of the Breach
ESA said only a small number of external servers were impacted. These servers support unclassified collaborative engineering activities. The stolen data includes source codes, access tokens, hardcoded credentials, Terraform files, and confidential documents.
ESA stated:
> “Our analysis so far indicates that only a very small number of external servers may have been impacted. These servers support unclassified collaborative engineering activities within the scientific community.”
Marketplace Sale and Potential Risks
An alleged hacker is offering the 200 GB of data on BreachForums. The sale could compromise the security of space projects, including ESA’s Ariel telescope scheduled for launch in 2029, and could allow malicious reuse of code.
Seb Latom warned:
> “The data for sale online compromises the security of space projects and risks the reuse of the code for malicious purposes.”
Historical Context and Response
This is not the first time ESA’s servers have been compromised. In December 2024 a fake payment page stole customer data; in 2015 a hacker group breached ESA websites to gather staff and subscriber information. All attacks targeted platforms outside ESA’s internal network, indicating a need for improved security. NASA also faced a breach in 2018 that exposed staff personal data.
ESA has started a forensic analysis and secured affected devices. All relevant stakeholders have been informed and further updates will be provided.
| Year | Incident |
|---|---|
| 2015 | Breach of ESA websites, staff and subscriber data |
| Dec 2024 | Fake payment page stole customer information |
| Recent | 200 GB data stolen from science servers |
Key Takeaways
- 200 GB of sensitive data, including source code, has been sold on BreachForums.
- The breach threatens ESA’s upcoming Ariel telescope launch in 2029.
- Multiple past incidents highlight the need for stronger security measures.
The breach underscores the vulnerability of space agencies to cyberattacks and the importance of safeguarding sensitive data.
