Breaches and incidentsBriefReported by a reputable outlet, citing the company
RingCentral: customer contact data stolen after a “sophisticated social engineering campaign”
RingCentral said systems were compromised following a “sophisticated social engineering campaign”, impact limited to a portion of customers, core platform...
- Disclosed
What happened
- RingCentral said systems were compromised following a “sophisticated social engineering campaign”, impact limited to a portion of customers, core platform unaffected. HIBP counted 1.6 million accounts (names, emails, phone numbers, addresses). ShinyHunters claimed 623GB and leaked 280GB.
- Root cause: social engineering, details not disclosed. RingCentral was also on Silent Push’s January list of SSO vishing targets.
- ShinyHunters claimed it on 27 Jul; RingCentral has not attributed it.
- RingCentral refused to pay; affected customers contacted.
Sources
- https://www.bleepingcomputer.com/news/security/ringcentral-data-breach-exposed-info-of-16-million-accounts/
- https://www.theregister.com/2026/01/26/shinyhunters_okta_sso_campaign/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.