European Commission cloud breach: a supply-chain compromise