HPE Launches Investigation into Security Breach Amid Hacker’s Claims of Stolen Sensitive Data
Hewlett-Packard Enterprise (HPE) is currently addressing a significant data breach incident after a notorious hacker, operating under the alias “IntelBroker,” claimed to have obtained sensitive corporate information from the company. This incident raises critical concerns about cybersecurity in the enterprise IT sector.
Details of the Data Breach
On January 16, IntelBroker made a post on a well-known cybercrime forum, as reported by TechCrunch. The hacker alleged that the stolen data encompasses:
- Product source code
- Private GitHub repositories
- Access keys to various HPE services, including APIs
- Platforms such as WePay, GitHub, and GitLab
In addition, IntelBroker claimed to have access to HPE user data, which includes personally identifiable information (PII) related to previous deliveries. This breach is particularly alarming given IntelBroker’s history of targeting major technology firms, including AMD, Cisco, and Nokia.
HPE’s Response and Investigation
In response to the claims, HPE spokesperson Laura von Pentz issued a statement, confirming that the company became aware of the situation on January 16. She stated:
“HPE immediately activated our cyber response protocols, disabled related credentials, and launched an investigation to evaluate the validity of the claims. There is no operational impact to our business at this time, nor evidence that customer information is involved.”
Previous Security Incidents
This incident is not the first for HPE. Almost a year ago, the company disclosed that it had been compromised by a hacking group known as Midnight Blizzard, which is reportedly linked to Russia. During that breach, hackers accessed and exfiltrated data from a small percentage of HPE’s cloud-based email environment.
Conclusion
As HPE continues its investigation into the data breach claimed by IntelBroker, it underscores the critical importance of robust cybersecurity measures in protecting sensitive corporate data. Companies must remain vigilant and proactive in the face of evolving cyber threats.
For more information on cybersecurity best practices, check out our comprehensive guide to safeguarding your business data.