Hackers Allegedly Claiming Breach Of Hewlett Packard Enterprise

Threat actor IntelBroker allegedly breached Hewlett Packard Enterprise (HPE) and claimed responsibility for the intrusion on a dark web forum.

This incident has significant consequences because it allegedly involves private GitHub repositories, Docker builds, SAP Hybris, certificates (both private and public keys), and product source code for Zerto and iLO.

Threat actor IntelBroker is well-known for planning widely known data breaches that target businesses, including Facebook Marketplace, Zscaler, and Apple. 

On underground forums such as BreachForums, they are known to offer access to breached systems and data. 

IntelBroker has taken credit for hacks that resulted in the release of secret documents and private information from government organizations like the Pentagon, the U.S. Department of Transportation, and Europol.

Investigate Real-World Malicious Links & Phishing Attacks With Threat Intelligence Lookup - Try for Free

Allegations Of Breach

IntelBroker’s claims suggest that the breach encompasses various sensitive information. Among the compromised assets are private GitHub repositories, which are vital for software development and collaboration. 

The exposure of these repositories could lead to unauthorized access to proprietary code and intellectual property.

Furthermore, Docker builds—essential for containerized applications—are also reportedly included in the breach, posing risks to application deployment and security.

Additionally, the breach allegedly includes SAP Hybris data, which is crucial for e-commerce and customer experience management.

The exposure of such data could have detrimental effects on HPE’s business operations and customer trust. 

The threat actor also claims to have obtained both private and public keys related to certificates, which are essential for secure communications and data integrity.

IntelBroker specifically mentioned that the product source code for the Zertoa disaster recovery solution and iLO (Integrated Lights-Out) management software has been compromised.

This could potentially allow malicious actors to exploit vulnerabilities within these products or create counterfeit versions that could deceive users.

The breach extends beyond corporate data; it also includes legacy user Personally Identifiable Information (PII) related to deliveries. This data could be used for identity theft or targeted phishing attacks. 

Additionally, access credentials for WePay and self-hosted GitHub accounts have been compromised, raising concerns about financial fraud and further unauthorized access to sensitive systems.

Integrating Application Security into Your CI/CD Workflows Using Jenkins & Jira -> Free Webinar