FlagThis

CyberSecurity updates
2025-01-30 17:22:27 Pacfic
bleepingcomputer.com
Hewlett Packard Enterprise Data Breach Claim - 10d
Read more: www.bleepingcomputer.com

A threat actor known as IntelBroker has claimed responsibility for a significant data breach at Hewlett Packard Enterprise (HPE), a major IT provider. The group alleges they gained access to a trove of sensitive data, including source code, certificates, and Personally Identifiable Information (PII), which is now reportedly being offered for sale on the dark web. This claim was initially made public by IntelBroker on a prominent cybercrime forum, and was revealed to Hackread.com by the hacker themselves. The hacker claims the attack was direct, targeting HPE's infrastructure rather than exploiting a third party.

The allegedly stolen data includes a range of critical information such as private GitHub repositories, Docker builds, and cryptographic keys. Notably, the threat actor is also claiming to have compromised the product source code for HPE's key technologies like Zerto and iLO, as well as legacy user PII related to deliveries. Access to APIs, WePay, and self-hosted GitHub repositories is also said to be compromised. Initial analysis of a data tree shared by IntelBroker appears to confirm these claims, with directory structures including private keys and certificates. The extent of the breach is currently under investigation.

Original img attribution: https://www.bleepstatic.com/content/hl-images/2024/02/05/HPE.jpg
ImgSrc: www.bleepstatic.com
References:

Classification:

This site is an experimental news aggregator using feeds I personally follow. You can provide me feedback using this form or using Bluesky.