Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Breaches

HubSpot Warns of Ongoing Cyberattacks Targeting Customer Accounts

HubSpot is “actively investigating and blocking attempts” to hack into customer accounts but some targets have already been compromised.

Enterprise software vendor HubSpot says it’s “actively investigating and blocking attempts” to hack into customer accounts and warned that at least 50 HubSpot targets have already been breached.

“While our investigation is still underway, we believe based on our initial assessment that the bad actors were able to gain unauthorized access to less than 50 HubSpot accounts,” HubSpot said in a brief notice posted online.

The Cambridge, Mass.-based HubSpot, which sells specialized tools for sales and marketing teams, said the unidentified hackers are continuing to target a limited number of HubSpot customers and attempting to gain unauthorized access to their HubSpot accounts. 

The company said it has contacted impacted customers and taken necessary steps to revoke the attacker’s access to customer data.

“As of 4:00 pm ET, June 28, we have seen no new instances of unauthorized access in the last 24 hours, and we have contacted all impacted customers at this time,” HubSpot said, insisting the impact will be isolated to a small subset of the HubSpot customer base. 

This isn’t HubSpot’s first brush with malicious hackers targeting its customer base.  In 2022, the company said a “bad actor” managed to hack into an employee account and use that access to export contact data from HubSpot accounts.

Advertisement. Scroll to continue reading.

Related: Cryptocurrency Services Hit by Data Breach at HubSpot

Related: Microsoft Alerts Customers to Email Theft in Midnight Blizzard Hack

Related: Millions of OpenSSH Servers Vulnerable to Remote regreSSHion Attack

Related: TeamViewer Hack Officially Attributed to Russian Cyberspies

Written By

Ryan Naraine is Editor-at-Large at SecurityWeek and host of the popular Security Conversations podcast series. He is a security community engagement expert who has built programs at major global brands, including Intel Corp., Bishop Fox and GReAT. Ryan is a founding-director of the Security Tinkerers non-profit, an advisor to early-stage entrepreneurs, and a regular speaker at security conferences around the world.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

In cyber-physical systems (CPS), just one hour of downtime can outweigh an entire annual security budget. Learn how to master the Return on Security Investment (ROSI) to align security goals with the bottom-line priorities.

Register

Delve into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization.

Register

People on the Move

Jacki Monson has joined CVS Health as SVP, Deputy CISO.

Gigi Schumm has been promoted to Chief Revenue Officer at Securonix.

Chris Sistrunk has been promoted to Practice Leader for Mandiant's OT Security Consulting.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.