01—Abstract
Summary
Summary of the 8-K filed January 24, 2024. Cited figures are marked; the original filing is the authoritative source.
Hewlett Packard Enterprise Company (HPE) filed an 8-K on January 24, 2024, disclosing a material cybersecurity incident.
On December 12, 2023, HPE was alerted to unauthorized access to its cloud-based email environment by a suspected nation-state actor, identified as Midnight Blizzard (Cozy Bear). The investigation revealed that data from a subset of HPE mailboxes, impacting various functions including cybersecurity and go-to-market teams, was accessed and exfiltrated starting in May 2023. While the investigation is ongoing, HPE believes this incident is connected to earlier unauthorized access and exfiltration of SharePoint files reported in June 2023.
At this time, HPE states the incident has not materially impacted its operations and is not reasonably likely to materially impact its financial condition or results of operations. The company is cooperating with law enforcement and assessing regulatory notification obligations.
02—Key points
Key Highlights
- HPE experienced a cybersecurity incident involving unauthorized access to its cloud-based email environment by a suspected nation-state actor (Midnight Blizzard/Cozy Bear).
- Data exfiltration from a small percentage of HPE mailboxes occurred starting in May 2023.
- The incident is believed to be related to a previously disclosed SharePoint file exfiltration incident from May 2023.
- HPE has activated its incident response process and is investigating with external cybersecurity experts.
- As of the filing date, the incident has not materially impacted HPE's operations.
- HPE has not determined that the incident is reasonably likely to materially impact its financial condition or results of operations.
- HPE is cooperating with law enforcement and assessing regulatory notification requirements.
03—Questions
Frequently Asked Questions
What was the nature of the cybersecurity incident?
HPE discovered unauthorized access to its cloud-based email environment by a suspected nation-state actor, believed to be Midnight Blizzard (Cozy Bear). This actor accessed and exfiltrated data from a small percentage of HPE mailboxes.
When did the unauthorized access and data exfiltration occur?
The unauthorized access was reported on December 12, 2023. However, the investigation indicated that data exfiltration began as early as May 2023.
Has this incident materially impacted HPE's business or financial performance?
As of January 24, 2024, HPE stated that the incident has not materially impacted the Company's operations and is not reasonably likely to materially impact its financial condition or results of operations.
What steps is HPE taking in response to the incident?
HPE has activated its incident response process, engaged external cybersecurity experts for investigation and remediation, is cooperating with law enforcement, and is assessing its regulatory notification obligations.
04—Continue