ESA Space Shop compromise disrupts Olly Services e-commerce checkout

The ESA Space Shop, operated by Olly Services rather than hosted or managed by the European Space Agency, was compromised with malicious JavaScript that inserted a fake Stripe payment page into the checkout flow. ESA confirmed that Olly Services ran the shop as Data Controller and that the externally hosted site was temporarily suspended while technical teams addressed the incident. The compromise therefore affected the operator's online sales and order-processing flow rather than ESA's internal infrastructure.