Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Breaches

HubSpot Warns of Ongoing Cyberattacks Targeting Customer Accounts

HubSpot is “actively investigating and blocking attempts” to hack into customer accounts but some targets have already been compromised.

Enterprise software vendor HubSpot says it’s “actively investigating and blocking attempts” to hack into customer accounts and warned that at least 50 HubSpot targets have already been breached.

“While our investigation is still underway, we believe based on our initial assessment that the bad actors were able to gain unauthorized access to less than 50 HubSpot accounts,” HubSpot said in a brief notice posted online.

The Cambridge, Mass.-based HubSpot, which sells specialized tools for sales and marketing teams, said the unidentified hackers are continuing to target a limited number of HubSpot customers and attempting to gain unauthorized access to their HubSpot accounts. 

The company said it has contacted impacted customers and taken necessary steps to revoke the attacker’s access to customer data.

“As of 4:00 pm ET, June 28, we have seen no new instances of unauthorized access in the last 24 hours, and we have contacted all impacted customers at this time,” HubSpot said, insisting the impact will be isolated to a small subset of the HubSpot customer base. 

This isn’t HubSpot’s first brush with malicious hackers targeting its customer base.  In 2022, the company said a “bad actor” managed to hack into an employee account and use that access to export contact data from HubSpot accounts.

Related: Cryptocurrency Services Hit by Data Breach at HubSpot

Related: Microsoft Alerts Customers to Email Theft in Midnight Blizzard Hack

Advertisement. Scroll to continue reading.

Related: Millions of OpenSSH Servers Vulnerable to Remote regreSSHion Attack

Related: TeamViewer Hack Officially Attributed to Russian Cyberspies

Written By

Ryan Naraine is Editor-at-Large at SecurityWeek and host of the popular Security Conversations podcast series. He is a security community engagement expert who has built programs at major global brands, including Intel Corp., Bishop Fox and GReAT. Ryan is a founding-director of the Security Tinkerers non-profit, an advisor to early-stage entrepreneurs, and a regular speaker at security conferences around the world.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

The AI Risk Summit brings together security and risk management executives, AI researchers, policy makers, software developers and influential business and government stakeholders.

Register

People on the Move

Managed security platform Deepwatch has named John DiLullo as Chief Executive Officer.

Technology company Tools for Humanity (TFH) hires Damien Kieran as CPO and Adrian Ludwig as CISO.

AI driven XDR provider Vectra AI has appointed Sailesh Munagala as Chief Financial Officer.

More People On The Move

Expert Insights