Data Breaches

HubSpot Warns of Ongoing Cyberattacks Targeting Customer Accounts

HubSpot is “actively investigating and blocking attempts” to hack into customer accounts but some targets have already been compromised.

HubSpot is "actively investigating and blocking attempts” to hack into customer accounts but some targets have already been compromised.

Enterprise software vendor HubSpot says it’s “actively investigating and blocking attempts” to hack into customer accounts and warned that at least 50 HubSpot targets have already been breached.

“While our investigation is still underway, we believe based on our initial assessment that the bad actors were able to gain unauthorized access to less than 50 HubSpot accounts,” HubSpot said in a brief notice posted online.

The Cambridge, Mass.-based HubSpot, which sells specialized tools for sales and marketing teams, said the unidentified hackers are continuing to target a limited number of HubSpot customers and attempting to gain unauthorized access to their HubSpot accounts. 

The company said it has contacted impacted customers and taken necessary steps to revoke the attacker’s access to customer data.

“As of 4:00 pm ET, June 28, we have seen no new instances of unauthorized access in the last 24 hours, and we have contacted all impacted customers at this time,” HubSpot said, insisting the impact will be isolated to a small subset of the HubSpot customer base. 

This isn’t HubSpot’s first brush with malicious hackers targeting its customer base.  In 2022, the company said a “bad actor” managed to hack into an employee account and use that access to export contact data from HubSpot accounts.

Advertisement. Scroll to continue reading.

Related: Cryptocurrency Services Hit by Data Breach at HubSpot

Related: Microsoft Alerts Customers to Email Theft in Midnight Blizzard Hack

Related: Millions of OpenSSH Servers Vulnerable to Remote regreSSHion Attack

Related: TeamViewer Hack Officially Attributed to Russian Cyberspies

Related Content

Threat Intelligence

Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of tracked incidents.

Cybercrime

Zohar Pinhasi was paying ransoms to obtain decryption keys and then charging victims substantially more for remediation.

Cybercrime

The individual was detained in May and has been extradited to Germany to face hacking charges.

Data Breaches

Hackers stole patient information from Clover Health Investments and AngMar Management Services in July.

Malware & Threats

The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025.

Cybercrime

Police took control of KillSec’s leak site and secured at least 110 terabytes of data stolen from victims.

Cybercrime

Karen Vardanyan has also been ordered to pay over $1.2 million in restitution to victims.

Cybercrime

Oleksii Oleksiyovych Lytvynenko has been sentenced to 4 years in prison after he was arrested in Ireland in 2023.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version