CYBER RISK DECEMBER 20, 2018 / 3:27 PM / UPDATED 12 MINUTES AGO

Exclusive: China hacked HPE, IBM and then attacked clients - sources

Christopher Bing, Jack Stubbs, Joseph Menn
6 MIN READ

WASHINGTON/LONDON/SAN FRANCISCO (Reuters) - Hackers working on behalf of China’s Ministry of State Security breached the networks of Hewlett Packard Enterprise Co and IBM, then used the access to hack into their clients’ computers, according to five sources familiar with the attacks.

The attacks were part of a Chinese campaign known as Cloudhopper, which the United States and Britain on Thursday said infected technology service providers in order to steal secrets from their clients.

While cybersecurity firms and government agencies have issued multiple warnings about the Cloudhopper threat since 2017, they have not disclosed the identity of technology companies whose networks were compromised.

International Business Machines Corp said it had no evidence that sensitive corporate data had been compromised. Hewlett Packard Enterprise (HPE) said it could not comment on the Cloudhopper campaign.

-snip-