HubSpot Suffers Cyberattack, Around 50 Customer Accounts Affected

Details are scarce, but HubSpot says everything is under control after the reported cyberattack. 

HubSpot has begun an investigation into a cyberattack after determining unauthorised access attempts against a “limited number” of its customers’ accounts.

TechCrunch reported it had picked up social media chatter about “some kind of cyberattack” against the marketing and sales behemoth. 

“HubSpot triggered our incident response procedures, and since June 22, we have been contacting impacted customers and taking necessary steps to revoke the unauthorised access and protect our customers and their data,” said Alyssa Robinson, Chief Information Security at HubSpot.

However, the CRM software company has not provided additional details about the impact of the cybersecurity incident, including the number of potentially affected clients and communications with its attackers, but the official statement mentioned a rough estimate: “While our investigation is still underway, we believe, based on our initial assessment, that the bad actors were able to gain unauthorised access to less than 50 HubSpot accounts.”

A similar incident occurred in March 2022, when “a bad actor had gained unauthorised access to a portion of our internal systems and a small number of customer accounts.” This allowed hackers to access and export contact data using the employee’s access to several HubSpot accounts.