Back Oodaloop

RingCentral data breach exposed info of 1.6 million accounts

Oodaloop • August 14, 2026

The ShinyHunters extortion group stole personal information from 1.6 million RingCentral accounts after hacking the company in July, according to the data breach notification service Have I Been Pwned. RingCentral is a cloud-based collaboration and communication platform used by over 600,000 businesses for services such as calling, messaging, and voicemail. The company disclosed the incident on July 28, revealing that its systems were compromised following what it described as a “sophisticated social engineering campaign.” “We have not seen any new unauthorized activity since taking these remediation efforts. To date, this incident has affected data for a limited portion of RingCentral customers, and we are communicating with affected customers directly,” it noted. “If you are not contacted by RingCentral, you are not affected. This incident did not impact the core RingCentral platform, and our services continue to operate without disruption.”

Full report : 1.6 Million RingCentral Users Likely Impacted by Data Breach .

Informing your decisions with actionable intelligence

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ShinyHunters Target SSO Accounts in Voice Phishing Attacks The ShinyHunters extortion gang has claimed responsibility for a series of voice phishing attacks targeting single sign-on (SSO) accounts at major platforms including Okta, Microsoft, and Google. In these attacks, threat actors impersonate IT support to trick employees into providing their credentials and multi-factor authentication codes, enabling access to corporate SaaS platforms and potential data theft for extortion purposes. 158 sources 51

Extracted Entities

RingCentral data breach exposed info of 1.6 million accounts

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)