Introduction
RingCentral, a cloud-based collaboration and communication platform used by over 600,000 businesses, experienced a data breach in July 2023. The ShinyHunters extortion group, which had previously breached hundreds of Salesforce and Snowflake customers, stole personal information from 1.6 million RingCentral accounts. This breach exposed names, email addresses, phone numbers, and physical addresses. The company has not attributed the breach to a specific threat actor or hacking group and has yet to share further details. ### Background on RingCentral
RingCentral is a cloud-based collaboration and communication platform used by over 600,000 businesses for services such as calling, messaging, and voicemail. The company disclosed the incident on July 28, revealing that its systems were compromised following a "," sophisticated social engineering campaign. ### Details of the Breach
The ShinyHunters extortion group stole personal information from 1.6 million RingCentral accounts. The company has not attributed the breach to a specific threat actor or hacking group and has yet to share further details on the incident. The company noted that it has not seen any new unauthorized activity since taking remediation efforts. ### Impact of the Breach
Although RingCentral has not attributed the breach to a specific threat actor or hacking group and has yet to share further details on the incident, the ShinyHunters extortion gang claimed responsibility on July 27, claiming they had stolen 623GB of data. The company refused to pay a ransom to have the stolen data destroyed, leading to the cybercrime group leaking a compressed archive containing 280GB worth of files on their dark web leak site. The leaked data contained records for 1.6 million accounts, including names, email addresses, phone numbers, and physical addresses. ### Analysis of the ShinyHunters Extortion Group
The ShinyHunters extortion group has been linked to security breaches at more than a dozen Snowflake customers, as well as various other third-party integration providers. The group has also claimed responsibility for a new series of breaches at over 100 organizations following data-theft attacks that exploited an Oracle PeopleSoft zero-day flaw. ### Recommendations for Users
Users should monitor their accounts for any unauthorized activity and change their passwords if they believe their credentials may have been compromised. ### Conclusion
RingCentral experienced a data breach affecting 1.6 million accounts, with personal information stolen by the ShinyHunters extortion group. The company has not attributed the breach to a specific threat actor or hacking group and has yet to share further details. Users should monitor their accounts for any unauthorized activity and change their passwords if they believe their credentials may have been compromised.
Comments