On March 18, a bad actor compromised a HubSpot employee account and used that account to access data within a small number of HubSpot customer accounts. We suspect that this bad actor may use this information to launch phishing attacks.