Government Cloud Accounts as Single‑Point Risk

A high‑profile cloud compromise of European Commission AWS accounts (claimed 350 GB stolen, including email servers and employee data) shows that the compromise of an administrative or vendor account can expose whole branches of government data. Governments' operational reliance on third‑party cloud credentials and backups concentrates risk even when the provider itself is not breached. — This reframes cybersecurity for public institutions from 'protect the provider' to 'harden account, identity, and backup governance' with implications for procurement, regulation, and incident reporting.