The personal information of 1.6 million people has apparently been stolen from the widely used business communications platform RingCentral by a notorious extortion group.
The incident occurred in July and was the result of a “sophisticated social engineering campaign,” RingCentral said in a statement observe on his website.
“Upon discovering the unauthorized activity, we took immediate action to stop the unauthorized activity and began an immediate investigation with the assistance of a leading third-party forensic firm. Since taking these remedial actions, we have not identified any new unauthorized activity,” the company said.
RingCentral said only a limited portion of its customers were affected by the attack and those people were notified directly.
“If you are not contacted by RingCentral, you will not be affected. This incident did not impact RingCentral’s core platform and our services continue to function without interruption,” it said.
While RingCentral did not name the attackers, extortion group ShinyHunters added the company to its Tor-based leak site in late July, claiming it had stolen over 623 gigabytes of data.
About a week later, when RingCentral did not give in to the extortionists’ demands, ShinyHunters released a 280 GB archive containing the data it claimed had been stolen from the company.
On Thursday, data breach reporting website HaveIBeenPwned added the leaked information to its database. proverb that it contains about 1.6 million unique email addresses, accompanied by names, addresses and phone numbers.
RingCentral has yet to confirm the attackers’ claims and the number of people potentially affected. Safety Week RingCentral has emailed RingCentral for comment on the matter and will update this article if the company responds.
RingCentral is a cloud-based provider of unified communications and contact center solutions. The platform offers business telephony, team messaging, video meetings, and AI-powered tools for employee collaboration and customer interactions.
Related: 14,000 Trezor customers affected by ShipMonk data breach
Related: AmnesiaStealer macOS malware steals data and controls browser sessions
Related: River Bank says hackers have deleted stolen data in a ransomware attack
Related: Brinks Home discloses data breach as hackers leak files
