On March 18, a bad actor compromised a HubSpot employee account and used that account to access data within a small number of HubSpot customer accounts. We suspect that this bad actor may use this information to launch phishing attacks.

Information About HubSpot's March 18, 2022 Security Incident
https://www.hubspot.com/en-us/march-2022-security-incident

notice how @HubSpot is trying to downplay this as access to “fewer than 30 accounts”

reality: 30 significant cryptocurrency companies whose customer data was compromised

this is major - minimizing employee-focused social attacks like this is egregious

BlockFi, Swan Bitcoin and Pantera Capital issued messages to their clients and warned that their information may have been accessed

Crypto firms warn customers after Hubspot employee account compromise
https://www.theblockcrypto.com/linked/138563/crypto-blockfi-pantera-hubspot-security-data