ShinyHunters group claims responsibility for RingCentral data breach

Based on information from Bleeping Computer, the extortion group ShinyHunters has claimed responsibility for a data breach affecting RingCentral, a cloud-based collaboration and communication platform used by hundreds of thousands of businesses. The breach reportedly compromised personal information from approximately 1.6 million RingCentral accounts.

The incident, which occurred in July, was disclosed by RingCentral as the result of a sophisticated social engineering campaign. While the company stated that the core platform was not impacted and services remained operational, the ShinyHunters group claimed to have stolen 623GB of data. After RingCentral allegedly refused to pay a ransom, the group leaked a portion of the data online. Have I Been Pwned confirmed that the leaked data contained records for 1.6 million accounts, including names, email addresses, phone numbers, and physical addresses.

ShinyHunters has a history of targeting customers of major cloud service providers, including Salesforce and Snowflake, and has recently been linked to attacks exploiting an Oracle PeopleSoft zero-day flaw.

Source: Bleeping Computer