RingCentral Breach Exposes Data for 1.6 Million People

About 1.6 million people’s personal details appear to have been exposed after a July social engineering attack on RingCentral. An extortion group known as ShinyHunters later published a 280GB archive it said contained the stolen material.

RingCentral detected unauthorized activity in July, blocked the access and opened an investigation with a third-party forensic firm. The company has maintained that only a limited portion of its customers were affected and that core services continued to operate without disruption.

In a notice on its website, RingCentral wrote: “Upon detection, we promptly took steps to stop the unauthorized activity and immediately began an investigation with assistance from a leading third-party forensic firm. We have not seen any new unauthorized activity since taking these remediation efforts.” The company added that it directly notified the individuals it believes were impacted and that anyone not contacted is not affected by the incident.

ShinyHunters added RingCentral to a Tor-based leak site in late July, claiming to have stolen more than 623 gigabytes of data. When RingCentral did not meet the extortion demands, the group published a 280GB archive. RingCentral has not confirmed the attackers’ claims or the total volume of data taken.

The breach-reporting service HaveIBeenPwned included the published files in its database and identified roughly 1.6 million unique email addresses in the set, along with associated names, physical addresses and phone numbers. RingCentral has not provided a breakdown by customer account or region.

RingCentral has engaged law enforcement and indicated remediation measures are in place. The company did not give a timetable for the completion of the forensic review or say whether it will notify regulators beyond informing affected customers. The investigation into how the social engineering campaign succeeded is ongoing.

RingCentral provides cloud-based unified communications and contact-center solutions, including business phone service, team messaging, video meetings and AI-assisted customer tools.