RingCentral Data Breach Exposes 1.6 Million Accounts

In July 2026, RingCentral suffered a data breach affecting 1.6 million accounts, attributed to the ShinyHunters extortion group. The breach involved a sophisticated social engineering attack that compromised the company's systems. RingCentral disclosed the incident on July 28, stating that the affected data included names, email addresses, phone numbers, and physical addresses. The ShinyHunters group claimed responsibility and leaked 280GB of data on their dark web site after RingCentral refused to pay a ransom. The company has communicated directly with affected customers and confirmed that the core platform remains operational. No specific details on the attack vector have been provided, but the incident highlights ongoing vulnerabilities in cloud-based services. Have I Been Pwned confirmed the breach's impact by analyzing the leaked data.

Key Points: • 1.6 million RingCentral accounts were compromised due to a social engineering attack. • ShinyHunters extortion group claimed responsibility and leaked data after a ransom demand. • RingCentral confirmed that core services remain operational and affected customers are being notified.