rule bulwark_https_bulwarkblack_com_shinyhunters_breaches_european_commission_350gb_of_sensitive_data { meta: author = "Bulwark Black LLC" source = "https://bulwarkblack.com/shinyhunters-breaches-european-commission-350gb-of-sensitive-data-exfiltrated-from-aws-cloud/" description = "Auto-extracted indicators. Verify before use; not a behavioral detection rule." generated = "2026-08-27T00:00:00Z" tlp = "TLP:CLEAR" indicator_count = "1" strings: $s0 = "match.com" ascii wide nocase // Domains condition: any of ($s*) }