RingCentral data breach exposed info of 1.6 million accounts

The ShinyHunters group exfiltrated 623GB of sensitive customer data from RingCentral, including names, email addresses, phone numbers, and physical addresses for 1.6 million accounts. When RingCentral refused to pay a ransom, the attackers publicly leaked the data on a dark web site, maximizing harm to affected individuals. This incident highlights the dual risk of ransomware-style extortion: paying does not guarantee data destruction, but refusing can result in full public exposure of customer records. Cloud communication platforms hold vast amounts of sensitive personal data, making them high-value targets that require robust data minimization, encryption, and breach response capabilities. The public confirmation via Have I Been Pwned underscores how quickly stolen data circulates and reaches threat intelligence communities.