ShinyHunters leaks data of 1.6 million RingCentral users after failed extortion

RingCentral confirmed that a limited segment of its customer base was compromised, resulting in the exposure of 1.6 million unique email addresses along with associated names, physical addresses and telephone numbers. The breach was attributed to a sophisticated social-engineering campaign, prompting the firm to immediately stop the intrusion, launch an investigation with a top third-party forensic firm, and report that no new unauthorized activity has been observed.

The extortion group ShinyHunters later posted the stolen data online, stating they had taken more than 623 GB of information and had given RingCentral a payment deadline that was not met. Screenshots of the group’s claim appeared on social media, and a spokesperson explained that the attackers gained access by voice-phishing an employee’s credentials. ShinyHunters has a history of targeting education-tech and healthcare organizations, and recently leaked data from Abbott’s cancer diagnostics division.