{"id":"ringcentral-customer-data-leak-jul-2026","category":"breach","status":"closed","title":"RingCentral customer data leaked with 1.6 million unique email addresses","tldr":"RingCentral customer contact details were stolen and published after a social engineering attack. Have I Been Pwned identified 1.6 million email addresses. Check your exposure and verify unexpected messages or calls through a trusted contact.","summary":"RingCentral, the business phone and communications service, disclosed a social engineering breach on 28 July. It said some customers’ data was affected, the unauthorised activity had been stopped and affected customers were being contacted directly. Its core platform continued operating without disruption. ShinyHunters claimed responsibility, and Have I Been Pwned subsequently identified approximately 1.6 million unique email addresses in published data, alongside names, phone numbers and physical addresses. That is an email-address count, not a company-confirmed count of affected customers or accounts. RingCentral has not publicly confirmed the attackers’ claimed data volume. In a statement published by SecurityWeek on 17 August, the company said its investigation was ongoing. No later public investigation outcome was found in the sources reviewed as of 3 November. There is no customer software patch for this breach.","action":"Check your email address in Have I Been Pwned and, if you use RingCentral at work, ask your IT team about any breach notice. Verify unexpected messages or calls using contact details you already trust. RingCentral says no software update is required for this incident.","product":"RingCentral business communications service","audience":"work","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["ringcentral","data-breach","social-engineering","shinyhunters","privacy"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"RingCentral Security Bulletins — General Advisory Notice","url":"https://www.ringcentral.com/trust-center/security-bulletin.html","by":"RingCentral","date":"2026-07-28"},{"kind":"research","title":"RingCentral Data Breach","url":"https://haveibeenpwned.com/Breach/RingCentral","by":"Have I Been Pwned","date":"2026-08-13"},{"kind":"news","title":"RingCentral data breach exposed info of 1.6 million accounts","url":"https://www.bleepingcomputer.com/news/security/ringcentral-data-breach-exposed-info-of-16-million-accounts/","by":"BleepingComputer","date":"2026-08-14"},{"kind":"news","title":"1.6 Million Likely Impacted by RingCentral Data Breach","url":"https://www.securityweek.com/1-6-million-likely-impacted-by-ringcentral-data-breach/","by":"SecurityWeek","date":"2026-08-17"}],"started":"2026-07-27","closed":"2026-08-17","created":"2026-11-03T21:12:47.548Z","updated":"2026-11-03T21:12:47.548Z","cve_notes":[],"timeline":[{"at":"2026-08-17","added":"2026-11-03T21:11:13.172Z","kind":"other","text":"SecurityWeek updated its report with a RingCentral statement saying the investigation remained ongoing and customers were being contacted as appropriate. The company reiterated that it had seen no further unauthorised activity after its response.","url":"https://www.securityweek.com/1-6-million-likely-impacted-by-ringcentral-data-breach/","by":"SecurityWeek","patch":null},{"at":"2026-08-13","added":"2026-11-03T21:11:13.172Z","kind":"other","text":"Have I Been Pwned added the breach, identifying approximately 1.6 million unique email addresses in data published by ShinyHunters. The exposed information also included names, phone numbers and physical addresses.","url":"https://haveibeenpwned.com/Breach/RingCentral","by":"Have I Been Pwned","patch":null},{"at":"2026-07-28","added":"2026-11-03T21:11:13.172Z","kind":"disclosed","text":"RingCentral disclosed a social engineering incident affecting some customers’ data and said it was contacting them directly. It said it had stopped the unauthorised activity, engaged forensic investigators and found no impact on its core platform.","url":"https://www.ringcentral.com/trust-center/security-bulletin.html","by":"RingCentral","patch":null},{"at":"2026-07-27","added":"2026-11-03T21:11:13.172Z","kind":"other","text":"ShinyHunters publicly claimed responsibility for a RingCentral breach and alleged it had stolen 623GB of data, according to BleepingComputer. RingCentral did not confirm that figure or name the attackers.","url":"https://www.bleepingcomputer.com/news/security/ringcentral-data-breach-exposed-info-of-16-million-accounts/","by":"BleepingComputer","patch":"na"}],"url":"https://hard.fyi/live/ringcentral-customer-data-leak-jul-2026/","json":"https://hard.fyi/api/live?id=ringcentral-customer-data-leak-jul-2026"}