{"id":91884,"date":"2025-02-08T02:29:46","date_gmt":"2025-02-08T02:29:46","guid":{"rendered":"https:\/\/cybersecuritynews.com\/?p=91884"},"modified":"2025-02-08T02:29:47","modified_gmt":"2025-02-08T02:29:47","slug":"hpe-alerts-employees-of-data-breach","status":"publish","type":"post","link":"https:\/\/cybersecuritynews.com\/hpe-alerts-employees-of-data-breach\/","title":{"rendered":"HPE Alerts Employees of Data Breach After Russian Cyberattack on Office 365"},"content":{"rendered":"\n

Hewlett Packard Enterprise (HPE) has disclosed a significant data breach involving its Office 365 email environment, attributed to the Russian state-sponsored hacking group known as Midnight Blizzard<\/a>, also referred to as Cozy Bear or APT29. <\/p>\n\n\n\n

The breach, which began in May 2023, was confirmed by HPE in December 2023 and has since been contained.<\/p>\n\n\n\n

Details of the Breach<\/strong><\/h2>\n\n\n\n

The attack targeted<\/a> several email accounts within HPE’s cybersecurity, marketing, and business teams. Using a compromised account, the hackers gained unauthorized access to email mailboxes and exfiltrated sensitive data. <\/p>\n\n\n\n

Information stolen includes Social Security numbers, driver\u2019s license details, and credit card numbers belonging to employees. Additionally, some files from HPE’s SharePoint server were accessed during the same timeframe.<\/p>\n\n\n\n

HPE’s forensic investigation revealed that the breach was part of a larger campaign by Midnight Blizzard, a group linked to Russia’s Foreign Intelligence Service<\/a> (SVR). <\/p>\n\n\n\n

This group has been implicated in other high-profile cyberattacks<\/a>, including the SolarWinds espionage campaign and a recent breach of Microsoft\u2019s corporate network.<\/p>\n\n\n\n

Response and Notifications<\/strong><\/h2>\n\n\n\n

HPE began notifying<\/a> affected individuals on January 29, 2025. Impacted employees were offered complimentary credit monitoring and identity theft protection services. <\/p>\n\n\n\n

The company also implemented enhanced security measures, such as rotating passwords and tokens, increasing monitoring capabilities, and strengthening access controls for privileged accounts<\/p>\n\n\n\n

In its communications with regulators and employees, HPE emphasized its commitment to safeguarding personal information and mitigating risks associated with the breach.<\/p>\n\n\n\n

The incident highlights ongoing vulnerabilities in cloud-based systems like Microsoft Office 365. Experts have pointed out that such breaches often exploit weak authentication practices or unprotected legacy accounts. <\/p>\n\n\n\n

The attack underscores the need for robust cybersecurity measures, including multi-factor authentication (MFA) and tighter endpoint controls.<\/p>\n\n\n\n

Midnight Blizzard\u2019s activities appear to be part of a broader espionage effort targeting governments, corporations, and IT service providers worldwide. The group is known for leveraging sophisticated techniques such as password spraying and abusing OAuth applications to maintain persistent access.<\/p>\n\n\n\n

This is not the first time HPE has faced cyberattacks<\/a>. In past years, the company dealt with breaches involving Chinese threat actors and vulnerabilities in its Aruba Central network monitoring platform. <\/p>\n\n\n\n

The latest attack adds to growing concerns about state-sponsored cyber espionage targeting critical technology firms. As investigations continue, <\/p>\n\n\n\n

HPE has assured stakeholders that it will take all necessary steps to address the incident and prevent future breaches. However, this event serves as a stark reminder of the escalating cyber threats faced by enterprises globally.<\/p>\n\n\n\n

Find this Story Interesting! Follow us on\u00a0Google News<\/a>,\u00a0LinkedIn<\/a>, and\u00a0X<\/a>\u00a0to Get More Instant Updates<\/code><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

Hewlett Packard Enterprise (HPE) has disclosed a significant data breach involving its Office 365 email environment, attributed to the Russian state-sponsored hacking group known as Midnight Blizzard, also referred to as Cozy Bear or APT29. The breach, which began in May 2023, was confirmed by HPE in December 2023 and has since been contained. Details […]<\/p>\n","protected":false},"author":3,"featured_media":91889,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjOo7E-sqpAefXEie739SwAE-vgFMd29LyRNNLtMF5yHzSkMKkSfGHqjeWQ4cmjyOEVFqPKwZW7Ms6NwD3IP4RUZd8y6yKS03fFSZbMhp2gsylo340PYB54bxT2RwdnGhiX_YmKzUxgg4UWKwzV3B78hOlkbm0if9oCP8J9k9q4uy29eo8vbfYuwKuHCoMb\/s1600\/HPE%20Alerts%20Employees%20of%20Data%20Breach.webp","fifu_image_alt":"HPE Alerts Employees of Data Breach","_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[10,11,14,13,845],"tags":[149,151,157],"class_list":{"0":"post-91884","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-cyber-security","8":"category-cyber-security-news","9":"category-data-breaches","10":"category-data-leak","11":"category-data-protection","12":"tag-cyber-security","13":"tag-cyber-security-news","14":"tag-data-breach"},"yoast_head":"\nHPE Alerts Employees of Data Breach After Russian Cyberattack on Office 365<\/title>\n<meta name=\"description\" content=\"Hewlett Packard Enterprise (HPE) has disclosed a significant data breach involving its Office 365 email environment.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cybersecuritynews.com\/hpe-alerts-employees-of-data-breach\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"HPE Alerts Employees of Data Breach After Russian Cyberattack on Office 365\" \/>\n<meta property=\"og:description\" content=\"Hewlett Packard Enterprise (HPE) has disclosed a significant data breach involving its Office 365 email environment.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cybersecuritynews.com\/hpe-alerts-employees-of-data-breach\/\" \/>\n<meta property=\"og:site_name\" content=\"Cyber Security News\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Hackingtutorialsandnews\" \/>\n<meta property=\"article:published_time\" content=\"2025-02-08T02:29:46+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-02-08T02:29:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjOo7E-sqpAefXEie739SwAE-vgFMd29LyRNNLtMF5yHzSkMKkSfGHqjeWQ4cmjyOEVFqPKwZW7Ms6NwD3IP4RUZd8y6yKS03fFSZbMhp2gsylo340PYB54bxT2RwdnGhiX_YmKzUxgg4UWKwzV3B78hOlkbm0if9oCP8J9k9q4uy29eo8vbfYuwKuHCoMb\/s1600\/HPE%20Alerts%20Employees%20of%20Data%20Breach.webp\" \/><meta property=\"og:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjOo7E-sqpAefXEie739SwAE-vgFMd29LyRNNLtMF5yHzSkMKkSfGHqjeWQ4cmjyOEVFqPKwZW7Ms6NwD3IP4RUZd8y6yKS03fFSZbMhp2gsylo340PYB54bxT2RwdnGhiX_YmKzUxgg4UWKwzV3B78hOlkbm0if9oCP8J9k9q4uy29eo8vbfYuwKuHCoMb\/s1600\/HPE%20Alerts%20Employees%20of%20Data%20Breach.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"900\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Balaji N\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjOo7E-sqpAefXEie739SwAE-vgFMd29LyRNNLtMF5yHzSkMKkSfGHqjeWQ4cmjyOEVFqPKwZW7Ms6NwD3IP4RUZd8y6yKS03fFSZbMhp2gsylo340PYB54bxT2RwdnGhiX_YmKzUxgg4UWKwzV3B78hOlkbm0if9oCP8J9k9q4uy29eo8vbfYuwKuHCoMb\/s1600\/HPE%20Alerts%20Employees%20of%20Data%20Breach.webp\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/balaji_gbh\" \/>\n<meta name=\"twitter:site\" content=\"@The_Cyber_News\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Balaji N\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"HPE Alerts Employees of Data Breach After Russian Cyberattack on Office 365","description":"Hewlett Packard Enterprise (HPE) has disclosed a significant data breach involving its Office 365 email environment.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cybersecuritynews.com\/hpe-alerts-employees-of-data-breach\/","og_locale":"en_US","og_type":"article","og_title":"HPE Alerts Employees of Data Breach After Russian Cyberattack on Office 365","og_description":"Hewlett Packard Enterprise (HPE) has disclosed a significant data breach involving its Office 365 email environment.","og_url":"https:\/\/cybersecuritynews.com\/hpe-alerts-employees-of-data-breach\/","og_site_name":"Cyber Security News","article_publisher":"https:\/\/www.facebook.com\/Hackingtutorialsandnews","article_published_time":"2025-02-08T02:29:46+00:00","article_modified_time":"2025-02-08T02:29:47+00:00","og_image":[{"url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjOo7E-sqpAefXEie739SwAE-vgFMd29LyRNNLtMF5yHzSkMKkSfGHqjeWQ4cmjyOEVFqPKwZW7Ms6NwD3IP4RUZd8y6yKS03fFSZbMhp2gsylo340PYB54bxT2RwdnGhiX_YmKzUxgg4UWKwzV3B78hOlkbm0if9oCP8J9k9q4uy29eo8vbfYuwKuHCoMb\/s1600\/HPE%20Alerts%20Employees%20of%20Data%20Breach.webp","type":"","width":"","height":""},{"width":1600,"height":900,"url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjOo7E-sqpAefXEie739SwAE-vgFMd29LyRNNLtMF5yHzSkMKkSfGHqjeWQ4cmjyOEVFqPKwZW7Ms6NwD3IP4RUZd8y6yKS03fFSZbMhp2gsylo340PYB54bxT2RwdnGhiX_YmKzUxgg4UWKwzV3B78hOlkbm0if9oCP8J9k9q4uy29eo8vbfYuwKuHCoMb\/s1600\/HPE%20Alerts%20Employees%20of%20Data%20Breach.webp","type":"image\/jpeg"}],"author":"Balaji N","twitter_card":"summary_large_image","twitter_image":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjOo7E-sqpAefXEie739SwAE-vgFMd29LyRNNLtMF5yHzSkMKkSfGHqjeWQ4cmjyOEVFqPKwZW7Ms6NwD3IP4RUZd8y6yKS03fFSZbMhp2gsylo340PYB54bxT2RwdnGhiX_YmKzUxgg4UWKwzV3B78hOlkbm0if9oCP8J9k9q4uy29eo8vbfYuwKuHCoMb\/s1600\/HPE%20Alerts%20Employees%20of%20Data%20Breach.webp","twitter_creator":"@https:\/\/twitter.com\/balaji_gbh","twitter_site":"@The_Cyber_News","twitter_misc":{"Written by":"Balaji N","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/cybersecuritynews.com\/hpe-alerts-employees-of-data-breach\/#article","isPartOf":{"@id":"https:\/\/cybersecuritynews.com\/hpe-alerts-employees-of-data-breach\/"},"author":{"name":"Balaji N","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/0ad7770df28fe608567609e4ba1c4da2"},"headline":"HPE Alerts Employees of Data Breach After Russian Cyberattack on Office 365","datePublished":"2025-02-08T02:29:46+00:00","dateModified":"2025-02-08T02:29:47+00:00","mainEntityOfPage":{"@id":"https:\/\/cybersecuritynews.com\/hpe-alerts-employees-of-data-breach\/"},"wordCount":414,"publisher":{"@id":"https:\/\/cybersecuritynews.com\/#organization"},"image":{"@id":"https:\/\/cybersecuritynews.com\/hpe-alerts-employees-of-data-breach\/#primaryimage"},"thumbnailUrl":"https:\/\/i3.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjOo7E-sqpAefXEie739SwAE-vgFMd29LyRNNLtMF5yHzSkMKkSfGHqjeWQ4cmjyOEVFqPKwZW7Ms6NwD3IP4RUZd8y6yKS03fFSZbMhp2gsylo340PYB54bxT2RwdnGhiX_YmKzUxgg4UWKwzV3B78hOlkbm0if9oCP8J9k9q4uy29eo8vbfYuwKuHCoMb\/s1600\/HPE%20Alerts%20Employees%20of%20Data%20Breach.webp?w=1600&resize=1600,900&ssl=1","keywords":["cyber security","cyber security news","data breach"],"articleSection":["Cyber Security","Cyber Security News","Data Breaches","Data Leak","Data protection"],"inLanguage":"en-US","copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/cybersecuritynews.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/cybersecuritynews.com\/hpe-alerts-employees-of-data-breach\/","url":"https:\/\/cybersecuritynews.com\/hpe-alerts-employees-of-data-breach\/","name":"HPE Alerts Employees of Data Breach After Russian Cyberattack on Office 365","isPartOf":{"@id":"https:\/\/cybersecuritynews.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cybersecuritynews.com\/hpe-alerts-employees-of-data-breach\/#primaryimage"},"image":{"@id":"https:\/\/cybersecuritynews.com\/hpe-alerts-employees-of-data-breach\/#primaryimage"},"thumbnailUrl":"https:\/\/i3.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjOo7E-sqpAefXEie739SwAE-vgFMd29LyRNNLtMF5yHzSkMKkSfGHqjeWQ4cmjyOEVFqPKwZW7Ms6NwD3IP4RUZd8y6yKS03fFSZbMhp2gsylo340PYB54bxT2RwdnGhiX_YmKzUxgg4UWKwzV3B78hOlkbm0if9oCP8J9k9q4uy29eo8vbfYuwKuHCoMb\/s1600\/HPE%20Alerts%20Employees%20of%20Data%20Breach.webp?w=1600&resize=1600,900&ssl=1","datePublished":"2025-02-08T02:29:46+00:00","dateModified":"2025-02-08T02:29:47+00:00","description":"Hewlett Packard Enterprise (HPE) has disclosed a significant data breach involving its Office 365 email environment.","breadcrumb":{"@id":"https:\/\/cybersecuritynews.com\/hpe-alerts-employees-of-data-breach\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cybersecuritynews.com\/hpe-alerts-employees-of-data-breach\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/hpe-alerts-employees-of-data-breach\/#primaryimage","url":"https:\/\/i3.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjOo7E-sqpAefXEie739SwAE-vgFMd29LyRNNLtMF5yHzSkMKkSfGHqjeWQ4cmjyOEVFqPKwZW7Ms6NwD3IP4RUZd8y6yKS03fFSZbMhp2gsylo340PYB54bxT2RwdnGhiX_YmKzUxgg4UWKwzV3B78hOlkbm0if9oCP8J9k9q4uy29eo8vbfYuwKuHCoMb\/s1600\/HPE%20Alerts%20Employees%20of%20Data%20Breach.webp?w=1600&resize=1600,900&ssl=1","contentUrl":"https:\/\/i3.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjOo7E-sqpAefXEie739SwAE-vgFMd29LyRNNLtMF5yHzSkMKkSfGHqjeWQ4cmjyOEVFqPKwZW7Ms6NwD3IP4RUZd8y6yKS03fFSZbMhp2gsylo340PYB54bxT2RwdnGhiX_YmKzUxgg4UWKwzV3B78hOlkbm0if9oCP8J9k9q4uy29eo8vbfYuwKuHCoMb\/s1600\/HPE%20Alerts%20Employees%20of%20Data%20Breach.webp?w=1600&resize=1600,900&ssl=1","width":"1600","height":"900","caption":"HPE Alerts Employees of Data Breach"},{"@type":"BreadcrumbList","@id":"https:\/\/cybersecuritynews.com\/hpe-alerts-employees-of-data-breach\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cybersecuritynews.com\/"},{"@type":"ListItem","position":2,"name":"HPE Alerts Employees of Data Breach After Russian Cyberattack on Office 365"}]},{"@type":"WebSite","@id":"https:\/\/cybersecuritynews.com\/#website","url":"https:\/\/cybersecuritynews.com\/","name":"Cyber Security News","description":"World's #1 Premier Cybersecurity and Hacking News Portal","publisher":{"@id":"https:\/\/cybersecuritynews.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cybersecuritynews.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/cybersecuritynews.com\/#organization","name":"Cyber Security News","url":"https:\/\/cybersecuritynews.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/logo\/image\/","url":"https:\/\/cybersecuritynews.com\/wp-content\/uploads\/2021\/06\/Cyber-security.jpg","contentUrl":"https:\/\/cybersecuritynews.com\/wp-content\/uploads\/2021\/06\/Cyber-security.jpg","width":200,"height":200,"caption":"Cyber Security News"},"image":{"@id":"https:\/\/cybersecuritynews.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Hackingtutorialsandnews","https:\/\/x.com\/The_Cyber_News","https:\/\/www.linkedin.com\/company\/cybersecurity-news\/"]},{"@type":"Person","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/0ad7770df28fe608567609e4ba1c4da2","name":"Balaji N","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/8075aac45cdbf0aae6572d8039978c587715d33d6b330539092189c91804f031?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8075aac45cdbf0aae6572d8039978c587715d33d6b330539092189c91804f031?s=96&d=mm&r=g","caption":"Balaji N"},"description":"BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.","sameAs":["https:\/\/www.linkedin.com\/company\/cybersecurity-news\/","https:\/\/x.com\/https:\/\/twitter.com\/balaji_gbh"],"url":"https:\/\/cybersecuritynews.com\/author\/balaji\/"}]}},"jetpack_featured_media_url":"https:\/\/i3.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjOo7E-sqpAefXEie739SwAE-vgFMd29LyRNNLtMF5yHzSkMKkSfGHqjeWQ4cmjyOEVFqPKwZW7Ms6NwD3IP4RUZd8y6yKS03fFSZbMhp2gsylo340PYB54bxT2RwdnGhiX_YmKzUxgg4UWKwzV3B78hOlkbm0if9oCP8J9k9q4uy29eo8vbfYuwKuHCoMb\/s1600\/HPE%20Alerts%20Employees%20of%20Data%20Breach.webp?w=1600&resize=1600,900&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/91884","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/comments?post=91884"}],"version-history":[{"count":3,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/91884\/revisions"}],"predecessor-version":[{"id":91890,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/91884\/revisions\/91890"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/media\/91889"}],"wp:attachment":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/media?parent=91884"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/categories?post=91884"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/tags?post=91884"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}