RingCentral customer data leaked with 1.6 million unique email addresses
RingCentral customer contact details were stolen and published after a social engineering attack. Have I Been Pwned identified 1.6 million email addresses. Check your exposure and verify unexpected messages or calls through a trusted contact.
Check your email address in Have I Been Pwned and, if you use RingCentral at work, ask your IT team about any breach notice. Verify unexpected messages or calls using contact details you already trust. RingCentral says no software update is required for this incident.
What’s happening
RingCentral, the business phone and communications service, disclosed a social engineering breach on 28 July. It said some customers’ data was affected, the unauthorised activity had been stopped and affected customers were being contacted directly. Its core platform continued operating without disruption. ShinyHunters claimed responsibility, and Have I Been Pwned subsequently identified approximately 1.6 million unique email addresses in published data, alongside names, phone numbers and physical addresses. That is an email-address count, not a company-confirmed count of affected customers or accounts. RingCentral has not publicly confirmed the attackers’ claimed data volume. In a statement published by SecurityWeek on 17 August, the company said its investigation was ongoing. No later public investigation outcome was found in the sources reviewed as of 3 November. There is no customer software patch for this breach.
- What
- Breach
- Affects
- RingCentral business communications service
- Fixed in
- Nothing to patch
- Since
- 27 July 2026
- Closed
- 17 Aug 2026
Timeline
- Update
SecurityWeek updated its report with a RingCentral statement saying the investigation remained ongoing and customers were being contacted as appropriate. The company reiterated that it had seen no further unauthorised activity after its response.
- Update
Have I Been Pwned added the breach, identifying approximately 1.6 million unique email addresses in data published by ShinyHunters. The exposed information also included names, phone numbers and physical addresses.
- Made public
RingCentral disclosed a social engineering incident affecting some customers’ data and said it was contacting them directly. It said it had stopped the unauthorised activity, engaged forensic investigators and found no impact on its core platform.
- UpdateNothing to patch
ShinyHunters publicly claimed responsibility for a RingCentral breach and alleged it had stolen 623GB of data, according to BleepingComputer. RingCentral did not confirm that figure or name the attackers.
Sources
- RingCentral Security Bulletins — General Advisory NoticeRingCentral · 28 July 2026
- RingCentral Data BreachHave I Been Pwned · 13 Aug 2026
- RingCentral data breach exposed info of 1.6 million accountsBleepingComputer · 14 Aug 2026
- 1.6 Million Likely Impacted by RingCentral Data BreachSecurityWeek · 17 Aug 2026