Data was stolen from European institution websites, but not from internal systems. The European Commission is already investigating and intends to use the incident to improve cybersecurity.