Pierluigi Paganini January 20, 2025

HPE is probing claims by the threat actor IntelBroker who is offering to sell alleged stolen source code and data from the company.

Last week, the notorious threat actor IntelBroker announced on a popular cybercrime forum the sale of data allegedly stolen from HPE.

IntelBroker, known for leaking data from major organizations, made the headlines by claiming responsibility for a breach of Cisco.

Data available for sale includes the source code for some company products, including Zerto and ILO (Integrated Lights-Out), SAP Hybris, digital certificates, Docker builds, private GitHub repositories, and old user PII for deliveries.

“Today, I am selling the Hewlett Packet Enterprise (HPE) data breach.

Breached by @Owner IntelBroker @ Moli zjj & @w EnergyWeaponUser

We’ve been connecting to some of their services for about 2 days now.” reads the announcement published on the cybercrime forum.

“Compromised data:

• Access: API access, WePay, Github, Github (self hosted) and more!
• Source code: Private Github repositories, Docker builds, SAP Hybris, Certificates (private and public keys),
• Product Source code: Zerto & ILO
• User data: Old user PII for deliveries

IntelBroker also claims access to some company’s services such as APIs, WePay, GitHub and GitLab.

Hewlett Packet Enterprise is investigating the claims, however, the company stated there is no operational impact or evidence of customer data involvement.

“HPE became aware on January 16 of claims being made by a group called IntelBroker that it was in possession of information belonging to HPE. HPE immediately activated our cyber response protocols, disabled related credentials, and launched an investigation to evaluate the validity of the claims,” HPE spokesperson Adam R. Bauer told SecurityWeek.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, HPE)