FlagThis

Hewlett Packard Enterprise (HPE) is notifying employees about a data breach that occurred in May 2023. The cyberattack, orchestrated by Russian state-sponsored hackers, targeted HPE's Office 365 email environment. The breach resulted in the theft of employee data, prompting HPE to alert affected individuals.

HPE began sending breach notification letters in January 2025, according to filings with Attorney General offices in New Hampshire and Massachusetts. The investigation determined that personal information, including driver's licenses, credit card numbers, and Social Security numbers, may have been subject to unauthorized access.

ImgSrc: www.bleepstatic.com

References:

• @BleepingComputer - Hewlett Packard Enterprise (HPE) is notifying employees whose data was stolen from the company's Office 365 email environment by Russian state-sponsored hackers in a May 2023 cyberattack. - 14d
• www.the420.in - Hewlett Packard Notifies Employees of Data Breach by Russian Hackers - 14d
• www.bleepingcomputer.com - HPE notifies employees of data breach after Russian Office 365 hack - 14d
• The420.in - Hewlett Packard Notifies Employees of Data Breach by Russian Hackers - 14d
• @bleepingcomputer.com - BleepingComputer - Hewlett Packard Enterprise (HPE) is notifying employees whose data was stolen from the company's Office 365 email environment by Russian state-sponsored hackers in a May 2023 cyberattack. - 13d
• @vulnerability_lookup - Hewlett Packard Enterprise (HPE) is notifying employees whose data was stolen from the company's Office 365 email environment by Russian state-sponsored hackers - 13d
• techcrunch.com - TechCrunch reports on HPE beginning to notify data breach victims after a Russian government hack. - 13d
• @youranonriots - Hewlett Packard Enterprise (HPE) is notifying employees whose data was stolen from the company's Office 365 email environment by Russian state-sponsored hackers in a May 2023 cyberattack. - 13d
• SCM feed for Threat Management - HPE employees alerted of Midnight Blizzard hack - 12d
• Security Affairs - HPE is notifying individuals affected by a December 2023 attack - 11d
• securebulletin.com - Hewlett Packard Enterprise (HPE) is notifying employees whose data was stolen. - 11d
• ciso2ciso.com - HPE Says Personal Information Stolen in 2023 Russian Hack – Source: www.securityweek.com - 11d

Classification:

• HashTags: HPE APT29
• Company: HPE
• Target: HPE employees
• Attacker: Midnight Blizzard (Cozy Bear/APT29)
• Product: Office 365
• Feature: Office 365 email
• Type: DataBreach
• Severity: Major