--- title: RingCentral data breach exposed info of 1.6 million accounts description: The ShinyHunters extortion group breached RingCentral in July after a sophisticated social engineering campaign, stealing personal data including names,... canonical: https://daily.dev/posts/ringcentral-data-breach-exposed-info-of-1-6-million-accounts-3ebblikbt twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: RingCentral data breach exposed info of 1.6 million accounts | daily.dev og:description: The ShinyHunters extortion group breached RingCentral in July after a sophisticated social engineering campaign, stealing personal data including names,... og:url: https://daily.dev/posts/ringcentral-data-breach-exposed-info-of-1-6-million-accounts-3ebblikbt og:image: https://api.daily.dev/og/posts/3eBbliKBT.png og:image:alt: RingCentral data breach exposed info of 1.6 million accounts og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # RingCentral data breach exposed info of 1.6 million accounts **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 0 upvotes · 0 comments ## Summary The ShinyHunters extortion group breached RingCentral in July after a sophisticated social engineering campaign, stealing personal data including names, emails, phone numbers, and addresses for 1.6 million accounts, according to Have I Been Pwned's analysis of leaked files. RingCentral refused to pay the ransom, prompting the group to leak a 280GB archive of the claimed 623GB stolen. The company says the core platform was unaffected and only a limited portion of customers were impacted. ShinyHunters has also been linked to breaches at Salesforce, Salesloft Drift, Snowflake, and Oracle PeopleSoft customers. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What data was exposed in the RingCentral breach by ShinyHunters? Leaked records exposed names, email addresses, phone numbers, and physical addresses for 1.6 million RingCentral accounts. The ShinyHunters extortion group claimed to have stolen 623GB of data after a social engineering attack in July, and released a 280GB archive on their dark web leak site after RingCentral refused to pay a ransom. Have I Been Pwned confirmed the leaked data matched RingCentral accounts. _Security teams tracking vendor breaches and exposure scope can follow developments like this on daily.dev._ ### Did the RingCentral breach affect the core communications platform? No, RingCentral stated the incident did not impact its core platform and that services continued operating without disruption. The company said the breach affected only a limited portion of customers, and that anyone not directly contacted by RingCentral was not affected. The breach resulted from what RingCentral described as a sophisticated social engineering campaign. _Anyone assessing vendor incident scope and customer impact can track breach disclosures on daily.dev._ ### What other companies has the ShinyHunters group targeted besides RingCentral? ShinyHunters has claimed breaches at hundreds of Salesforce customers, stealing over 1.5 billion records combined across Salesloft Drift and Salesforce Aura campaigns, plus more than a dozen Snowflake customers and various third-party integration providers. Most recently the group claimed responsibility for breaches at over 100 organizations following attacks that exploited an Oracle PeopleSoft zero-day flaw. _Teams monitoring recurring extortion campaigns across SaaS vendors can follow ShinyHunters activity on daily.dev._ ## Similar posts on daily.dev - [Charter Communications data breach affects 4.9 million accounts](https://daily.dev/posts/charter-communications-data-breach-affects-4-9-million-accounts-tqaixxttl) · BleepingComputer · 0 upvotes · 0 comments - [Zara data breach exposed personal information of 197,000 people](https://daily.dev/posts/zara-data-breach-exposed-personal-information-of-197-000-people-v24mdsfne) · BleepingComputer · 0 upvotes · 0 comments - [Cybercriminals claim breach of Oracle PeopleSoft servers at 100-plus organizations](https://daily.dev/posts/cybercriminals-claim-breach-of-oracle-peoplesoft-servers-at-100-plus-organizations-pjb82lsrq) · TechCrunch · 0 upvotes · 0 comments - [McGraw Hill linked to 13.5M-record data leak](https://daily.dev/posts/mcgraw-hill-linked-to-13-5m-record-data-leak-tnqwik1wr) · The Register · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#data-breach](https://daily.dev/tags/data-breach) [View this post on daily.dev](https://daily.dev/posts/ringcentral-data-breach-exposed-info-of-1-6-million-accounts-3ebblikbt) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"RingCentral data breach exposed info of 1.6 million accounts","url":"https://daily.dev/posts/ringcentral-data-breach-exposed-info-of-1-6-million-accounts-3ebblikbt","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/ringcentral-data-breach-exposed-info-of-1-6-million-accounts-3ebblikbt"},"datePublished":"2026-08-14T10:54:45.472Z","dateModified":"2026-08-15T12:44:09.157Z","description":"The ShinyHunters extortion group breached RingCentral in July after a sophisticated social engineering campaign, stealing personal data including names,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/58ca849a0d39c8d2a3a0bb0b2b14403b?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/58ca849a0d39c8d2a3a0bb0b2b14403b?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/ringcentral-data-breach-exposed-info-of-1-6-million-accounts-3ebblikbt","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,data-breach","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"RingCentral data breach exposed info of 1.6 million accounts"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/ringcentral-data-breach-exposed-info-of-1-6-million-accounts-3ebblikbt#faq","mainEntity":[{"@type":"Question","name":"What data was exposed in the RingCentral breach by ShinyHunters?","acceptedAnswer":{"@type":"Answer","text":"Leaked records exposed names, email addresses, phone numbers, and physical addresses for 1.6 million RingCentral accounts. The ShinyHunters extortion group claimed to have stolen 623GB of data after a social engineering attack in July, and released a 280GB archive on their dark web leak site after RingCentral refused to pay a ransom. Have I Been Pwned confirmed the leaked data matched RingCentral accounts. Security teams tracking vendor breaches and exposure scope can follow developments like this on daily.dev."}},{"@type":"Question","name":"Did the RingCentral breach affect the core communications platform?","acceptedAnswer":{"@type":"Answer","text":"No, RingCentral stated the incident did not impact its core platform and that services continued operating without disruption. The company said the breach affected only a limited portion of customers, and that anyone not directly contacted by RingCentral was not affected. The breach resulted from what RingCentral described as a sophisticated social engineering campaign. Anyone assessing vendor incident scope and customer impact can track breach disclosures on daily.dev."}},{"@type":"Question","name":"What other companies has the ShinyHunters group targeted besides RingCentral?","acceptedAnswer":{"@type":"Answer","text":"ShinyHunters has claimed breaches at hundreds of Salesforce customers, stealing over 1.5 billion records combined across Salesloft Drift and Salesforce Aura campaigns, plus more than a dozen Snowflake customers and various third-party integration providers. Most recently the group claimed responsibility for breaches at over 100 organizations following attacks that exploited an Oracle PeopleSoft zero-day flaw. Teams monitoring recurring extortion campaigns across SaaS vendors can follow ShinyHunters activity on daily.dev."}}]} ```