RingCentral Breach Exposed Data From 1.6 Million Accounts, HIBP Says
Summary
Have I Been Pwned says leaked data linked to a RingCentral breach contained records for 1.6 million accounts. RingCentral cited social engineering, said its core platform was unaffected, and reported no new unauthorized activity after remediation.
Key points
- RingCentral said a sophisticated social-engineering campaign led to the incident but did not attribute it to a specific threat actor.
- Have I Been Pwned analyzed leaked data and confirmed records for 1.6 million accounts, including names, email addresses, phone numbers, and physical addresses.
- ShinyHunters claimed responsibility and said it stole 623 GB of data; the group reportedly leaked a compressed archive after RingCentral refused to pay a ransom.
- RingCentral said its core platform was not affected and services continued without disruption.
- The company said it had seen no new unauthorized activity after remediation and was contacting affected customers.
Article Details
- Victim Organization
- RingCentral
- Incident Type
- Data breach involving a social engineering campaign, alleged data theft, and extortion
- Data Types Exposed
- Names
- Email addresses
- Phone numbers
- Physical addresses
- Affected Records
- 1.6 million accounts, according to Have I Been Pwned
- Affected Data Size
- ShinyHunters claimed to have stolen 623 GB of data; a compressed archive described as containing 280 GB of files was reportedly leaked.
- Operational Impact
- RingCentral said its core platform was not affected and its services continued without disruption. The company said data for a limited portion of customers was affected.
- Ransom Or Extortion
- ShinyHunters claimed a pay-or-leak extortion campaign. The article reports RingCentral refused to pay and that data was subsequently leaked; the group's responsibility and theft claims were not attributed by RingCentral.
- Claim Status
- confirmed