BlockFi Hubspot Data Breach - Revision history

Azoundria: Another 30 minutes complete. All sources merged in. Prevention added. Information relocated around.

2023-07-07T17:41:22Z

Another 30 minutes complete. All sources merged in. Prevention added. Information relocated around.

← Older revision		Revision as of 11:41, 7 July 2023
Line 130:		Line 130:

	== Ultimate Outcome ==		== Ultimate Outcome ==
	~~What~~ was the ~~end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?~~

			===Employee Responsible For Breach Fired===
			The hacker compromised a HubSpot employee account and focused on stealing data from cryptocurrency industry customers<ref name="threatpost-8170" />. The "rogue" HubSpot employee was fired over the breach that targeted the company's cryptocurrency customers<ref name="threatpost-8170" />.

	== Total Amount Recovered ==		== Total Amount Recovered ==
	There do not appear to have been any funds ~~recovered~~ in this case.		There do not appear to have been any funds lost in this case.

	~~What funds~~ were ~~recovered? What funds were reimbursed for those affected users?~~		== Ongoing Developments ==
			HubSpot has provided limited details into their upgraded security model, and there are presently suspected to be dozens of other crypto companies who were also using HubSpot and did not publicly disclose this information breach.

	== Ongoing ~~Developments~~ ==		=== Ongoing Phishing Attack Risk ===
	~~What parts of this case are still remaining to be concluded?~~		Although no sensitive financial or personal data was included, security specialists have raised concerns about the potential for social engineering attacks using the exfiltrated information<ref name="threatpost-8170" />.

	Hubspot ~~reported upgrading~~ security on their ~~FAQ~~<ref name="hubspot-8171222" />:<blockquote>Since the incident, we have taken steps to enhance our security and to prevent a similar attack from occurring in the future. While our investigation has concluded and remediation completed, we remain committed to improving our security through regular assessments and testing. </blockquote>		=== Upgrades To HubSpot Security Model ===
			Hubspot reportedly has "taken steps" to "enhance" their security which they believe will "prevent a similar attack from occurring in the future". They "remain committed to improving [their] security through regular assessments and testing"<ref name="hubspot-8171222" />.<blockquote>Since the incident, we have taken steps to enhance our security and to prevent a similar attack from occurring in the future. While our investigation has concluded and remediation completed, we remain committed to improving our security through regular assessments and testing.</blockquote>With limited tangible details provided publicly, it remains to be seen how effective these new security measures will be at preventing future breaches.

	== ~~General Prevention Policies~~ ==		=== Many Companies Not Disclosing Breach===
	~~Privacy~~-~~conscious customers can set up separate email addresses for each service easily~~, and ~~avoid providing their phone number when possible~~. ~~Any received emails must be viewed with scrutiny. Interact with companies only through their official websites~~ and ~~confirm anything with the company directly if it promises a significant reward or threatens access to your funds~~.		According to Swan Bitcoin CEO Cory Klippsten reported that HubSpot had indicated "around 30 crypto companies [were affected by] the hack"<ref name="coryklippstentwitter-86182" />. The only companies which appear to have reported the breach so far are Swan Bitcoin, BlockFi, NYDIG, and Circle. (Pantera Capital suffered a separate HubSpot breach a year prior, and was not part of this incident.)

	~~Platforms should put in place multi-signature access control on all~~ customer data~~, which requires~~ the ~~approval~~ of ~~multiple people to enable~~ the ~~download of data~~.		If this is true, it could indicate around 26 companies who had customer data breached and did not report the issue. Users of other cryptocurrency services should be on guard that their data may have been breached in the HubSpot incident.
	== Individual Prevention Policies ==		== Individual Prevention Policies ==
	{{Prevention:Individuals:~~Placeholder~~}}		Most companies have insecurities. Any information provided to a company may be breached or abused.

			=== Protection Of Personal Information ===
			Obviously, anything you can do to minimize the amount of information which you provide to websites will reduce your risk.

			{{Prevention:Individuals:Protect Personal Information}}

	{{Prevention:~~Individual~~:~~Avoid Third Party Custodians~~}}		=== Never Give Access To Your Funds ===
			In a typical cryptocurrency fraud, malicious actors try to use the available information to convince you to give them authorization to access or transfer funds. This can be accomplished via tricking you into providing a private key or seed phrase, signing a transaction that grants them permission to move funds, or installing malware on your device. In most cases, this will be accomplished via a greed or fear trigger, and you should be on extra guard when experiencing those emotions.

			{{Prevention:Individuals:Never Share Private Keys}}

			{{Prevention:Individuals:Always Verify Executables}}

			{{Prevention:Individuals:Store Funds Offline}}

	{{Prevention:Individuals:End}}		{{Prevention:Individuals:End}}
			== Platform Prevention Policies ==
			Platforms should put in place multi-signature access control on all customer data, which requires the approval of multiple people to enable the download of data. An external security review should be conducted regularly. If information is lost in a breach, the level of damage can be minimized by educating users about potential scams and frauds that they may encounter. Platforms should be prepared to assist with victims, which could be done through an industry insurance fund.

	~~== Platform Prevention Policies ==~~		{{Prevention:Platforms:Cryptocurrency Safety Quiz}}
	{{Prevention:Platforms:~~Placeholder~~}}

	{{Prevention:~~Platform~~:~~Supply Chain Assessment~~}}		{{Prevention:Platforms:Implement Multi-Signature}}

	{{Prevention:Platforms:Regular Audit Procedures}}		{{Prevention:Platforms:Regular Audit Procedures}}

			{{Prevention:Platform:Supply Chain Assessment}}

	{{Prevention:Platforms:Establish Industry Insurance Fund}}		{{Prevention:Platforms:Establish Industry Insurance Fund}}

	{{Prevention:Platforms:End}}		{{Prevention:Platforms:End}}
			== Regulatory Prevention Policies ==
			While the best solution is to reduce the amount of information collected, a combination of increased education, improved security, and a collective industry insurance fund can also prevent and mitigate the outcome of a similar data breach.

	== ~~Regulatory~~ Prevention ~~Policies~~ ==		=== Private Identity Key Protocol ===
	{{Prevention:Regulators:~~Placeholder~~}}		{{Prevention:Regulators:Private Identity Key Protocol}}

			=== Increased Education For Cryptocurrency Users ===
			{{Prevention:Regulators:Cryptocurrency Education Mandate}}

			=== Third Party Security Assessments ===
	{{Prevention:Regulators:Platform Security Assessments}}		{{Prevention:Regulators:Platform Security Assessments}}

	{{Prevention:~~Regulators~~:Establish Industry Insurance Fund}}		=== Establish Industry Insurance Fund ===
			{{Prevention:Platforms:Establish Industry Insurance Fund}}

	{{Prevention:Regulators:End}}		{{Prevention:Regulators:End}}

	== References ==		== References ==
	<references>		<references>

Azoundria: Another 30 minutes complete.

2023-06-28T16:29:14Z

Another 30 minutes complete.

Show changes

Azoundria: Adding Bitcoin Magazine article.

2023-04-25T17:10:07Z

Adding Bitcoin Magazine article.

← Older revision		Revision as of 11:10, 25 April 2023
Line 94:		Line 94:
	\|Blockworks Article Published		\|Blockworks Article Published
	\|Blockworks publishes an article on the situation. They reported multiple crypto companies were affected including NYDIG, Pantera Capital, BlockFi, Circle and Swan Bitcoin. They report that Pantera Capital was breached a month earlier, and reference a Tweet from a breach a year and a month ago. The data breach saw user information leaked to hackers, but not passwords or sensitive personal information. It is believed to have been a “targeted incident focused on customers in the cryptocurrency industry”. Affected companies maintain customer funds are still safe and secure, and are monitoring the situation closely. The full extent of the HubSpot hack is still unknown and the investigation is reportedly still ongoing<ref name="blockworks-8621">[https://blockworks.co/nydig-blockfi-pantera-circle-all-targeted-in-hubspot-data-breach/ NYDIG, BlockFi, Pantera, Circle All ‘Targeted’ in HubSpot Data Breach - Blockworks] (Jul 20, 2022)</ref>.		\|Blockworks publishes an article on the situation. They reported multiple crypto companies were affected including NYDIG, Pantera Capital, BlockFi, Circle and Swan Bitcoin. They report that Pantera Capital was breached a month earlier, and reference a Tweet from a breach a year and a month ago. The data breach saw user information leaked to hackers, but not passwords or sensitive personal information. It is believed to have been a “targeted incident focused on customers in the cryptocurrency industry”. Affected companies maintain customer funds are still safe and secure, and are monitoring the situation closely. The full extent of the HubSpot hack is still unknown and the investigation is reportedly still ongoing<ref name="blockworks-8621">[https://blockworks.co/nydig-blockfi-pantera-circle-all-targeted-in-hubspot-data-breach/ NYDIG, BlockFi, Pantera, Circle All ‘Targeted’ in HubSpot Data Breach - Blockworks] (Jul 20, 2022)</ref>.
			\|-
			\|March 21st, 2022 5:05:26 PM MDT
			\|Bitcoin Magazine Article
			\|Bitcoin Magazine publishes an article on the Hubspot data breach<ref>[https://web.archive.org/web/20220321230526/https://bitcoinmagazine.com/business/how-hubspot-data-breach-hits-bitcoiners How HubSpot Data Breach Hits Bitcoiners - Bitcoin Magazine Archive March 21st, 2022 5:05:26 PM MDT] (Apr 25, 2023)</ref>. They report the unauthorized user with "super admin" access exported contact lists and data, including IP addresses, email histories, customer browsing behavior, financial value, and help tickets. While financial data was not compromised, the loss of user persona and behavioral data is severe, and users should expect spear phishing and spam attacks. Users are advised to be cautious of unsolicited communications and to use privacy best practices when browsing, buying, and communicating online<ref name="bitcoinmagazine-8600">[https://bitcoinmagazine.com/business/how-hubspot-data-breach-hits-bitcoiners How HubSpot Data Breach Hits Bitcoiners - Bitcoin Magazine - Bitcoin News, Articles and Expert Insights] (Jul 19, 2022)</ref>.
	\|-		\|-
	\|March 22nd, 2022 3:10:55 AM MDT		\|March 22nd, 2022 3:10:55 AM MDT

Azoundria: Initial 30 minutes completed.

2023-04-24T22:14:18Z

Initial 30 minutes completed.

Show changes

Azoundria at 21:14, 10 April 2023

2023-04-10T21:14:54Z

← Older revision		Revision as of 15:14, 10 April 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/blockfihubspotdatabreach.php}}		{{Imported Case Study 2\|source=https://www.quadrigainitiative.com/casestudy/blockfihubspotdatabreach.php}}
			{{Unattributed Sources}}

	[[File:Blockfi.jpg\|thumb\|BlockFi]]BlockFi is a platform which allows users to provide their cryptocurrency and earn a high rate of return, as the platform lends out the funds to other users. The company used HubSpot to assist with managing their customer relationships. HubSpot suffered a data breach and names, email addresses, and phone numbers of customers were leaked. An announcement was made and the employee at the company who enabled the breach has been fired. Customers must be aware for future phishing scams which may target them.		[[File:Blockfi.jpg\|thumb\|BlockFi]]BlockFi is a platform which allows users to provide their cryptocurrency and earn a high rate of return, as the platform lends out the funds to other users. The company used HubSpot to assist with managing their customer relationships. HubSpot suffered a data breach and names, email addresses, and phone numbers of customers were leaked. An announcement was made and the employee at the company who enabled the breach has been fired. Customers must be aware for future phishing scams which may target them.

	This exchange or platform is based in United States, or the incident targeted people primarily in United States.		This exchange or platform is based in United States, or the incident targeted people primarily in United States.<ref name="eteq-7726" /><ref name="blockfitwitter-8169" /><ref name="observer-1229" /><ref name="coinspeaker-1230" /><ref name="coindesk-1231" /><ref name="yahoofinance-1233" /><ref name="threatpost-8170" /><ref name="hubspot-8171" />

	== About BlockFi ==		== About BlockFi ==
Line 65:		Line 66:
	!Description		!Description
	\|-		\|-
	\|March 18th, 2022 6:47:00 PM		\|March 18th, 2022 6:47:00 PM MDT
	\|Main Event		\|Main Event
	\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.		\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
Line 92:		Line 93:
	== Ongoing Developments ==		== Ongoing Developments ==
	What parts of this case are still remaining to be concluded?		What parts of this case are still remaining to be concluded?
			== General Prevention Policies ==
	== Prevention Policies ==
	Privacy-conscious customers can set up separate email addresses for each service easily, and avoid providing their phone number when possible. Any received emails must be viewed with scrutiny. Interact with companies only through their official websites and confirm anything with the company directly if it promises a significant reward or threatens access to your funds.		Privacy-conscious customers can set up separate email addresses for each service easily, and avoid providing their phone number when possible. Any received emails must be viewed with scrutiny. Interact with companies only through their official websites and confirm anything with the company directly if it promises a significant reward or threatens access to your funds.

	Platforms should put in place multi-signature access control on all customer data, which requires the approval of multiple people to enable the download of data.		Platforms should put in place multi-signature access control on all customer data, which requires the approval of multiple people to enable the download of data.
			== Individual Prevention Policies ==
			{{Prevention:Individuals:Placeholder}}

			{{Prevention:Individuals:End}}

			== Platform Prevention Policies ==
			{{Prevention:Platforms:Placeholder}}

			{{Prevention:Platforms:End}}

			== Regulatory Prevention Policies ==
			{{Prevention:Regulators:Placeholder}}

			{{Prevention:Regulators:End}}

	== References ==		== References ==
	[https://eteq.com/trezor-investigates-potential-information-breach-as-customers-cite-phishing-assaults/ Trezor Investigates Potential Information Breach As Customers Cite Phishing Assaults -] (May 21)		<references><ref name="eteq-7726">[https://eteq.com/trezor-investigates-potential-information-breach-as-customers-cite-phishing-assaults/ Trezor Investigates Potential Information Breach As Customers Cite Phishing Assaults -] (May 21, 2022)</ref>

	[https://twitter.com/BlockFi/status/1504982848771608586 @BlockFi Twitter] (Jun 20)		<ref name="blockfitwitter-8169">[https://twitter.com/BlockFi/status/1504982848771608586 @BlockFi Twitter] (Jun 20, 2022)</ref>

	[https://observer.com/2021/03/blockfi-review-does-blockfi-work-is-it-legit-or-too-risky/ BlockFi Review: Does BlockFi Work? Is It Legit or Too Risky? \| Observer] (Jul 4)		<ref name="observer-1229">[https://observer.com/2021/03/blockfi-review-does-blockfi-work-is-it-legit-or-too-risky/ BlockFi Review: Does BlockFi Work? Is It Legit or Too Risky? \| Observer] (Jul 5, 2021)</ref>

	[https://www.coinspeaker.com/blockfi-zero-fee-trading/ BlockFi Offers Zero-Fee Trading for Bitcoin, Ethereum and GUSD Stablecoin] (Jul 4)		<ref name="coinspeaker-1230">[https://www.coinspeaker.com/blockfi-zero-fee-trading/ BlockFi Offers Zero-Fee Trading for Bitcoin, Ethereum and GUSD Stablecoin] (Jul 5, 2021)</ref>

	[https://www.coindesk.com/blockfi-rate-cut-on-bitcoin-deposits-leaves-rivals-scratching-heads BlockFi Rate Cut on Bitcoin Deposits Leaves Rivals Scratching Heads - CoinDesk] (Jul 4)		<ref name="coindesk-1231">[https://www.coindesk.com/blockfi-rate-cut-on-bitcoin-deposits-leaves-rivals-scratching-heads BlockFi Rate Cut on Bitcoin Deposits Leaves Rivals Scratching Heads - CoinDesk] (Jul 5, 2021)</ref>

	[https://finance.yahoo.com/news/blockfi-review-2021-fees-services-215520829.html BlockFi Review 2021: Fees, Services & More] (Jul 4)		<ref name="yahoofinance-1233">[https://finance.yahoo.com/news/blockfi-review-2021-fees-services-215520829.html BlockFi Review 2021: Fees, Services & More] (Jul 5, 2021)</ref>

	[https://threatpost.com/hubspot-data-breach-crytocurrency-industry/179086/ HubSpot Data Breach Ripples Through Crytocurrency Industry \| Threatpost] (Jun 20)		<ref name="threatpost-8170">[https://threatpost.com/hubspot-data-breach-crytocurrency-industry/179086/ HubSpot Data Breach Ripples Through Crytocurrency Industry \| Threatpost] (Jun 20, 2022)</ref>

	[https://www.hubspot.com/en-us/march-2022-security-incident Information About HubSpot's March 18, 2022 Security Incident] (Jun 26)		<ref name="hubspot-8171">[https://www.hubspot.com/en-us/march-2022-security-incident Information About HubSpot's March 18, 2022 Security Incident] (Jun 26, 2022)</ref></references>

Azoundria: Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/blockfihubspotdatabreach.php}} BlockFiBlockFi is a platform which allows users to provide their cryptocurrency and earn a high rate of return, as the platform lends out the funds to other users. The company used HubSpot to assist with managing their customer relationships. HubSpot suffered a data breach and names, email addresses, and phone numbers of customers were leak..."

2023-01-28T16:56:01Z

Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/blockfihubspotdatabreach.php}} thumb|BlockFiBlockFi is a platform which allows users to provide their cryptocurrency and earn a high rate of return, as the platform lends out the funds to other users. The company used HubSpot to assist with managing their customer relationships. HubSpot suffered a data breach and names, email addresses, and phone numbers of customers were leak..."

New page

{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/blockfihubspotdatabreach.php}}

[[File:Blockfi.jpg|thumb|BlockFi]]BlockFi is a platform which allows users to provide their cryptocurrency and earn a high rate of return, as the platform lends out the funds to other users. The company used HubSpot to assist with managing their customer relationships. HubSpot suffered a data breach and names, email addresses, and phone numbers of customers were leaked. An announcement was made and the employee at the company who enabled the breach has been fired. Customers must be aware for future phishing scams which may target them.

This exchange or platform is based in United States, or the incident targeted people primarily in United States.

== About BlockFi ==
"BlockFi is a crypto management platform that lets you leverage your cryptocurrency and put it to fair use." "This platform has been around since 2017, and while it’s independently owned, several financial giants like SoFi and Fidelity back it." "At BlockFi, you can earn up to 8.6% interest per year on your cryptocurrency holdings, borrow cash, buy and sell crypto, and access other bank-like services. It’s like an all-in-one crypto bank." "Today, a growing number of users are using BlockFi as a bank for their cryptocurrency. Just like you use Bank of America or a Credit Union for your fiat currency, you can use BlockFi for your cryptocurrency."

"BlockFi [recently] introduced trading at no fees for Bitcoin, Ethereum and the stablecoin GUSD. The startup has been known to allow users access to returns on their cryptocurrency holdings by offering loans to borrowers against users’ cryptocurrency holdings and then passing across the returns in terms of interest on the loans while securing the crypto assets that were used as security for the loans."

"As part of Hubspot being used for CRM and marketing processes, BlockFi stored data that included name, email, and phone number for a majority of our clients."

"As Cointelegraph reported, hackers gained entry to BlockFi’s shopper data that was hosted on Hubspot, a client relationship administration platform."

According to BlockFi: “Hubspot has confirmed that an unauthorized third-party gained entry to certain BlockFi shopper data housed on their platform.”

"On Mar. 19, New Jersey-based crypto financial institution BlockFi proactively confirmed an info breach to warn merchants in regards to the alternative of phishing assaults."

"While specifics on the breached data are however to be acknowledged and revealed, BlockFi reassured prospects by highlighting that personal data — along with passwords, government-issued IDs and social security numbers — “have been certainly not saved on Hubspot.”"

"On Friday, March 18, 2022, BlockFi learned of a data incident at one of our third-party vendors, Hubspot, a client relationship management platform. Hubspot has confirmed that an unauthorized third-party gained access to certain BlockFi client data housed on their platform." "HubSpot provides a customer relationship management (CRM) platform for marketing, sales and content management services."

"To be clear, BlockFi's internal systems and client funds are safeguarded and were not impacted. We can also confirm that BlockFi account passwords, government-issued ID numbers and social security numers were never stored on Hubspot. The incident occurred at Hubspot and we are notifying you directly so that you can take actions to further protect yourself. No action is needed on your BlockFi account at this time."

"The protection and safekeeping of our systems and clients' assets are of the utmost importance." "We are working with Hubspot as the continue their investigation to understand the full scope of impact." "We will continue to keep you updated as this process evolves."

"A rogue employee working at HubSpot – used by more than 135,000 (and growing) customers to manage marketing campaigns and on-board new users – has been fired over a breach that zeroed in on the company’s cryptocurrency customers, the company confirmed on Friday."

"A full list of the affected clients has not been published, but [HubSpot] said it appeared to be a “targeted incident focused on customers in the cryptocurrency industry”."

This exchange or platform is based in United States, or the incident targeted people primarily in United States.

The background of the exchange platform, service, or individuals involved, as it would have been seen or understood at the time of the events.

Include:

* Known history of when and how the service was started.
* What problems does the company or service claim to solve?
* What marketing materials were used by the firm or business?
* Audits performed, and excerpts that may have been included.
* Business registration documents shown (fake or legitimate).
* How were people recruited to participate?
* Public warnings and announcements prior to the event.

Don't Include:
* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
* Anything that wasn't reasonably knowable at the time of the event.
There could be more than one section here. If the same platform is involved with multiple incidents, then it can be linked to a main article page.

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.
{| class="wikitable"
|+Key Event Timeline - BlockFi Hubspot Data Breach
!Date
!Event
!Description
|-
|March 18th, 2022 6:47:00 PM
|Main Event
|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
|-
|
|
|
|}

== Total Amount Lost ==
No funds were lost.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?

== Prevention Policies ==
Privacy-conscious customers can set up separate email addresses for each service easily, and avoid providing their phone number when possible. Any received emails must be viewed with scrutiny. Interact with companies only through their official websites and confirm anything with the company directly if it promises a significant reward or threatens access to your funds.

Platforms should put in place multi-signature access control on all customer data, which requires the approval of multiple people to enable the download of data.

== References ==
[https://eteq.com/trezor-investigates-potential-information-breach-as-customers-cite-phishing-assaults/ Trezor Investigates Potential Information Breach As Customers Cite Phishing Assaults -] (May 21)

[https://twitter.com/BlockFi/status/1504982848771608586 @BlockFi Twitter] (Jun 20)

[https://observer.com/2021/03/blockfi-review-does-blockfi-work-is-it-legit-or-too-risky/ BlockFi Review: Does BlockFi Work? Is It Legit or Too Risky? | Observer] (Jul 4)

[https://www.coinspeaker.com/blockfi-zero-fee-trading/ BlockFi Offers Zero-Fee Trading for Bitcoin, Ethereum and GUSD Stablecoin] (Jul 4)

[https://www.coindesk.com/blockfi-rate-cut-on-bitcoin-deposits-leaves-rivals-scratching-heads BlockFi Rate Cut on Bitcoin Deposits Leaves Rivals Scratching Heads - CoinDesk] (Jul 4)

[https://finance.yahoo.com/news/blockfi-review-2021-fees-services-215520829.html BlockFi Review 2021: Fees, Services & More] (Jul 4)

[https://threatpost.com/hubspot-data-breach-crytocurrency-industry/179086/ HubSpot Data Breach Ripples Through Crytocurrency Industry | Threatpost] (Jun 20)

[https://www.hubspot.com/en-us/march-2022-security-incident Information About HubSpot's March 18, 2022 Security Incident] (Jun 26)