According to HubSpot, the incident occured on March 18, when a “bad actor” managed to hack into an employee account. After the breach was discovered, the impacted account’s access was terminated and the company also “removed the ability for other employees to take certain actions in customer accounts.”
HubSpot’s investigation is ongoing, but so far it appears that this was a targeted attack aimed at customers in the cryptocurrency industry. The breach is said to affect “fewer than 30 HubSpot portals,” with the hacker attempting to access contact data.
