RingCentral Social Engineering Incident May Affect 1.6 Million
Summary
RingCentral says a July social-engineering incident affected a limited number of customers. Have I Been Pwned listed data associated with about 1.6 million email addresses; RingCentral has not confirmed the attackers or affected-person count.
Key points
- RingCentral said a social-engineering incident occurred in July and affected a limited portion of its customers.
- Have I Been Pwned added leaked information associated with about 1.6 million unique email addresses, including names, addresses and phone numbers.
- ShinyHunters claimed it stole more than 623 GB of data and later published a 280 GB archive; RingCentral has not confirmed the group’s claims.
- RingCentral said it stopped the unauthorized activity, has seen no further activity, and is investigating with a third-party forensic firm.
- RingCentral said its core platform and services continued operating without disruption; the investigation is ongoing.
Article Details
- Victim Organization
- RingCentral
- Incident Type
- Social engineering incident involving unauthorized activity and alleged data theft
- Data Types Exposed
- Email addresses
- Names
- Addresses
- Phone numbers
- Affected Records
- HaveIBeenPwned reported approximately 1.6 million unique email addresses in the leaked information. RingCentral has not confirmed the number of affected individuals.
- Affected Data Size
- ShinyHunters claimed to have stolen over 623 GB of data; it later published a 280 GB archive allegedly containing stolen data. RingCentral has not confirmed the theft or the data volume.
- Operational Impact
- RingCentral said the incident did not affect its core platform or disrupt services, and that it had taken steps to stop the unauthorized activity.
- Ransom Or Extortion
- ShinyHunters reportedly added RingCentral to its leak site and made extortion demands. After RingCentral did not succumb to the demands, the group published a 280 GB archive allegedly containing stolen data.
- Claim Status
- claimed