TeamPCP Supply Chain Campaign: Update 006 - CERT-EU Confirms European Commission Cloud Breach, Sportradar Details Emerge, and Mandiant Quantifies Campaign at 1,000+ SaaS Environments, (Fri, Apr 3rd)

Update 006 (Apr 1–3, 2026) on the TeamPCP supply‑chain campaign: CERT‑EU confirmed a cloud breach impacting the European Commission; Sportradar disclosed additional victim details; and Mandiant estimates the campaign has compromised 1,000+ SaaS environments. The campaign continues to weaponize a compromised security scanner to achieve post‑compromise cloud enumeration, monetization (including dual ransomware operations) and data leakage (e.g., AstraZeneca). Prior confirmed victims (e.g., Mercor AI) and investigations (Databricks, Axios attribution narrowing, LiteLLM developments) were noted. A