HPE says it was hacked by Russian group behind Microsoft email breach

Hewlett Packard Enterprise disclosed that Russia-linked threat actor Midnight Blizzard (APT29/Cozy Bear) breached its Office 365 email environment starting in May 2023, accessing and exfiltrating data from a small percentage of mailboxes—mainly within cybersecurity, go-to-market, and business teams—and indicated the incident may be related to a prior May 2023 SharePoint exfiltration; Microsoft has also reported related APT access to corporate email accounts.