Although the Commission confirmed the theft of data from some servers, the attack did not affect internal systems.