Skip to content

HubSpot

Controversies

Controversies tied to this brand in public sources. A listing is not a finding of fault.

Back to profile4 entries

  1. 2022

    HubSpot discloses cyberattack targeting cryptocurrency customers

    Issue disclosure

    HubSpot confirmed that hackers targeted customers in the cryptocurrency industry and compromised a HubSpot employee account. Its initial assessment indicated that data was exported from fewer than 30 HubSpot portals, whose users had been notified.

    Company response

    • Personnel action — HubSpot

      it terminated access for the compromised employee account
    • Remediation — HubSpot

      removed the ability for other employees to take certain actions in customer accounts
    • Ongoing disclosure — HubSpot

      While our investigation is ongoing, we wanted to share these initial findings

    Source excerpt

    • HubSpot, a Cambridge, Mass.-based provider of CRM, sales and marketing software, confirmed that hackers targeted customers in the cryptocurrency industry in a cybersecurity attack reported March 18, 2022.
    • The “bad actor,” as HubSpot reported, compromised a HubSpot employee account.
    • Another affected customer, BlockFi, tweeted confirmation on March 18, 2022, that hackers gained access to client data housed on the HubSpot platform.
  2. 2022

    HubSpot reports hack affecting cryptocurrency-sector customer portals

    Issue disclosure

    HubSpot reported that a bad actor compromised an employee account on March 18 and that fewer than 30 customer portals were targeted, including portals in the cryptocurrency industry. The reported stolen information appeared to be contact details. HubSpot said its investigation was ongoing and described steps to restrict account access.

    Company response

    • Investigation — HubSpot

      HubSpot did not disclose how the compromise took place, saying only that their investigation is still underway.
    • Remediation — HubSpot

      HubSpot noted that it had terminated access for the compromised employee account and has removed the ability for other employees to take certain actions in customer accounts.

    Source excerpt

    • Marketing software firm HubSpot Inc. has been hacked, resulting in a data breach at several leading cryptocurrency-related companies.
    • According to HubSpot, the hack occurred on March 18 and involved a bad actor compromising an employee account.
    • Those known to be affected include Circle Internet Financial Ltd., BlockFi Lending LLC, Pantera Capital, New York Digital Investments Group LLC and Swan Bitcoin.
  3. 2016

    Workplace-culture criticism in Disrupted

    After Disrupted was published, Daniel Lyons criticized HubSpot's workplace culture, job security, and management practices, describing the environment in strongly negative terms. HubSpot's founders issued a response addressing several of his claims.

  4. 2015

    Mike Volpe manuscript controversy

    HubSpot dismissed Chief Marketing Officer Mike Volpe after finding that he violated the company's conduct code while attempting to obtain an unpublished draft of Daniel Lyons's critical book about his experience at HubSpot. Reporting described efforts involving unauthorized email access and pressure against publication.