A RingCentral data breach leaked personal information from 1.6 million accounts after a July cyberattack. Here’s what was taken, who was affected, and how you can protect yourself now online.
Table of Contents
What Happened in the RingCentral Data Breach?
RingCentral provides calling, messaging, voicemail, and other communication services to more than 600,000 businesses.
The company disclosed the incident on July 28. RingCentral said the attack followed a “sophisticated social engineering campaign.”
ShinyHunters claimed responsibility one day earlier. The cybercrime group said it stole 623GB of data from RingCentral.
The group later published a 280GB archive after RingCentral refused to pay for the stolen data to be deleted.
However, RingCentral has not publicly confirmed that ShinyHunters carried out the attack.
The company said its main RingCentral platform was not affected. It also said it had seen no new unauthorized activity after taking security measures.
Your information may also have been leaked in other breaches without you realizing it.
If you are unsure, automatic monitoring can help you spot problems earlier. Futureproof monitors your data for leaks 24/7 and helps you reduce scam risks with simple, clear steps.
Who Was Affected and What Data Was Leaked?
Have I Been Pwned analyzed the published files and found records linked to about 1.6 million RingCentral accounts.
The leaked information included:
- Names
- Email addresses
- Phone numbers
- Physical addresses
RingCentral has not publicly said that passwords, payment card details, or Social Security numbers were included.
Even basic contact details can help criminals make phishing emails, texts, and calls appear more believable.
For example, a message that uses your real name, phone number, or employer information may feel more trustworthy.
Futureproof monitors your information for data leaks 24/7 and guides you with clear steps to keep it safer from scams.
Run a free checkHow Hackers Got Into RingCentral
RingCentral said the breach followed a social engineering campaign.
Social engineering means manipulating a person into providing information or access that criminals should not have.
However, the company has not publicly explained exactly how the attackers entered its systems.
It has also not said whether stolen passwords, phishing messages, or another method played a role.
At Futureproof, Kevin explains digital safety in simple words, with clear tips and zero fluff. He holds a degree in information technology and studies fraud trends to keep his tips up-to-date.
In his free time, Kevin plays with his cat, enjoys board-game nights, and hunts for New York’s best cinnamon rolls.
