HEWLETT PACKARD ENTERPRISE COMPANY

Hewlett Packard Enterprise (HPE.COM) is a multinational enterprise information technology company based in San Jose, California. Founded in 2015 from a split from Hewlett-Packard, its services include cloud consulting, cybersecurity, AI, and data analytics, among others. It also provides edge-to-cloud platform-as-a-service capabilities. HPE sells servers, storage, and network products to businesses and governmental agencies.

Hewlett Packard Enterprise Company notified the Maryland Attorney General on February 4, 2025, of a data event affecting 33 Maryland residents. On December 12, 2023, a suspected nation-state actor gained unauthorized access to HPE's cloud-based email environment. HPE engaged external experts to contain and remediate the incident. Affected individuals received notice starting January 29, 2025, and were offered 24 months of credit monitoring and identity theft restoration services.

Hewlett Packard Enterprise Company (HPE) notified the New Hampshire Attorney General that a suspected nation-state actor gained unauthorized access to HPE's cloud-based email environment. HPE was notified of the incident on December 12, 2023. The incident affected 6 New Hampshire residents. HPE engaged external cybersecurity experts, contained the incident, and remediated the issue by rotating credentials and enhancing security controls. Personal information potentially involved includes basic identity data. HPE began notifying affected individuals on January 29, 2025, and is offering credit monitoring services.

Hewlett Packard Enterprise Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-02-05. 10 Massachusetts residents were affected.

Hewlett Packard Enterprise Company, a general business entity filed a data breach notification with the Nebraska Attorney General. The breach was discovered on 2023-12-12 according to the AG's register. The breach is dated 2023-05-05. Nebraska residents were notified on 2025-01-29.

HPE disclosed an Item 1.05 material cybersecurity incident: on December 12, 2023, HPE was notified that suspected nation-state actor Midnight Blizzard (Cozy Bear) gained unauthorized access to its cloud-based email environment, exfiltrating data from a small percentage of mailboxes beginning May 2023. The incident is believed related to a separately-noticed June 2023 SharePoint exfiltration. HPE engaged external experts, contained and eradicated the activity, and notified law enforcement. No material impact determined as of filing.