(Credit: AaronP/Bauer-Griffin/GC Images via Getty Images)
A hacker known as "IntelBroker" has claimed on the cybercrime forum BreachForums that they have breached Hewlett Packard Enterprise (HPE), a US IT firm that caters to businesses and broke off from Hewlett Packard (HP) in 2015.
The hacker made a post on Jan. 16, writing: "We've been connecting to some of their services for about 2 days now." The individual also claims to have swiped source code, private GitHub repository data, certificates, and other data including some personal information, per a screenshot shared by Bleeping Computer.
"HPE became aware on January 16 of claims being made by a group called IntelBroker that it was in possession of information belonging to HPE," Clare Loxley, senior director of global communications at HPE, tells PCMag in a statement, adding: "HPE immediately activated our cyber response protocols, disabled related credentials, and launched an investigation to evaluate the validity of the claims."
Loxley noted that there is no "operational impact" to HPE at time of writing, nor has the company found any evidence that customer information has been exposed.
This latest possible HPE breach appears to be separate from a previous breach reported last year. HPE told the US Securities and Exchange Commission in January last year that a threat actor accessed its systems and took data beginning in May 2023. That incident has since been attributed to the Russian hacking group known as Midnight Blizzard or Cozy Bear.
IntelBroker has taken responsibility for other data breaches in the past and has previously targeted DC Health link, Home Depot, AMD, and other organizations. While personal data was exposed in the DC Health link and Home Depot breaches, AMD said at the time that only a "limited amount of information" relating to assembling some AMD products was swiped.
IntelBroker often uses ransomware and leaks stolen data on BreachForums, which they now manage as an administrator. While HPE describes IntelBroker as a group, a hacker claiming to be IntelBroker has said that they are a solo actor, are Serbian, and are currently living in Russia—though this has not been independently confirmed.
Unfortunately, data breaches via ransomware attacks have become increasingly common in recent years. You can check if your data has been exposed in a breach by using a site like HaveIBeenPwned or Malwarebytes' digital footprint check. If your personal info has surfaced online, you can consider using different data removal services to delete your data from the web.