Second data breach at European Commission this year leaves open questions over resilience