Virtual Event: Zero Trust Strategies Summit - Watch all Sessions
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Breaches

HubSpot Warns of Ongoing Cyberattacks Targeting Customer Accounts

HubSpot is “actively investigating and blocking attempts” to hack into customer accounts but some targets have already been compromised.

Enterprise software vendor HubSpot says it’s “actively investigating and blocking attempts” to hack into customer accounts and warned that at least 50 HubSpot targets have already been breached.

“While our investigation is still underway, we believe based on our initial assessment that the bad actors were able to gain unauthorized access to less than 50 HubSpot accounts,” HubSpot said in a brief notice posted online.

The Cambridge, Mass.-based HubSpot, which sells specialized tools for sales and marketing teams, said the unidentified hackers are continuing to target a limited number of HubSpot customers and attempting to gain unauthorized access to their HubSpot accounts. 

The company said it has contacted impacted customers and taken necessary steps to revoke the attacker’s access to customer data.

“As of 4:00 pm ET, June 28, we have seen no new instances of unauthorized access in the last 24 hours, and we have contacted all impacted customers at this time,” HubSpot said, insisting the impact will be isolated to a small subset of the HubSpot customer base. 

This isn’t HubSpot’s first brush with malicious hackers targeting its customer base.  In 2022, the company said a “bad actor” managed to hack into an employee account and use that access to export contact data from HubSpot accounts.

Advertisement. Scroll to continue reading.

Related: Cryptocurrency Services Hit by Data Breach at HubSpot

Related: Microsoft Alerts Customers to Email Theft in Midnight Blizzard Hack

Related: Millions of OpenSSH Servers Vulnerable to Remote regreSSHion Attack

Related: TeamViewer Hack Officially Attributed to Russian Cyberspies

Written By

Ryan Naraine is Editor-at-Large at SecurityWeek and host of the popular Security Conversations podcast series. He is a security community engagement expert who has built programs at major global brands, including Intel Corp., Bishop Fox and GReAT. Ryan is a founding-director of the Security Tinkerers non-profit, an advisor to early-stage entrepreneurs, and a regular speaker at security conferences around the world.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.

Register

Join as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.

Register

People on the Move

Randy Resnick has joined IGEL as Field CTO.

Darktrace has named Adam Towns as CFOO, Mike McGuinness as CRO, and Beth Shea as CCO.

Acronis has appointed Gerald Caron as CISO.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.