ShinyHunters claims RingCentral breach, says 620GB of data stolen

ShinyHunters has claimed responsibility for a cyber attack on cloud-based communications provider RingCentral, claiming that it infiltrated the company’s internal network and exfiltrated more than 620 GB of confidential data.

 

RingCentral is a cloud-based business communications platform that provides services such as business phone systems, video conferencing, team messaging, and contact-center solutions. It helps organisations manage workplace communications through cloud-based tools and integrates with various business applications.

 

Last month, in a data security incident notice published on its website, RingCentral said it had fallen victim to a sophisticated social engineering campaign targeting the company. The cloud-based communications provider immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

It also took steps to secure the affected systems, stop the unauthorised activity  and notified relevant law enforcement authorities about the same.

 

“We have not seen any new unauthorised activity since taking these remediation efforts. To date, this incident has affected data for a limited portion of RingCentral customers, and we are communicating with affected customers directly,” the company said.

 

 

The ShinyHunters hacker group claimed responsibility for the cyber attack on RingCentral, listing the company as a victim on its data leak site. The group claimed it had obtained more than 623 GB of confidential data from the company and threatened to release the database publicly unless a ransom was paid by July 30.

 

After RingCentral declined to pay the ransom, ShinyHunters followed through on its threat by leaking the entire stolen database online.

 

“The company failed to reach an agreement with us despite our incredible patience, all the chances and offers we made. They don’t care,” the hacker group said.

 

Noted security researcher Troy Hunt, who operates the popular data breach repository Have I Been Pwned, analysed the leaked data and confirmed that the breach compromised 1.6 million unique email addresses, along with names, physical addresses and phone numbers.

 

“To date, this incident has affected data for a limited portion of RingCentral customers, and we are communicating with affected customers directly. If you are not contacted by RingCentral, you are not affected. This incident did not impact the core RingCentral platform, and our services continue to operate without disruption,” RingCentral added.