Council of Europe 2026 Data Breach Claim
The Council of Europe was named in a data-theft claim published by ShinyHunters in June 2026. CERT-EU dates the public claim to 14 June 2026; this is not a confirmed initial intrusion date.
The organization has not published how many were affected, so the incident cannot be placed on this scale.
Exposed Data Types
1 sensitive9- Health information
- Names
- Phone numbers
- Physical addresses
- Dates of birth
- Bank account information
- Tax information
- Salary information
- Email addresses
About This Record
On 15 June, the Council told BleepingComputer and SecurityWeek that it was investigating and assessing the situation.
Reported data scope
Reporting attributed claims of approximately 297 GB and more than 429,000 documents to the threat actor. The alleged material included human resources and payroll records, CVs and internal files. Names, dates of birth, addresses, phone numbers, bank account details, tax information and medical information were also among the reported categories. The organisation had not confirmed these categories or the claimed volume. Document totals should not be treated as affected-person totals.
Verification status
The exact number of affected people, the initial access date and an incident-specific attack method could not be established from the public sources reviewed. This entry is therefore classified as an unverified data exposure. People who may be concerned should rely on notices from the Council’s official website and exercise caution with unexpected messages or files referring to the incident.
Organisation and sources
The Council of Europe uses coe.int and is separate from the European Union institutions. This entry does not describe the European Commission incident. Sources: CERT-EU June 2026 brief, BleepingComputer’s direct Council statement, SecurityWeek reporting and Council of Europe institutional information.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
