Attackers breached HubSpot to target crypto firms like Swan Bitcoin and Trezor, launching phishing campaigns to steal wallet recovery seeds. A single compromised SaaS account rippled downstream, exposing how vendor access can become a backdoor to customers.