2026 RingCentral — ShinyHunters; HIBP 1.6M accounts (names/emails/phones/addresses)
Data compromised
HIBP: names, email addresses, phone numbers, physical addresses for ~1.6 million accounts. RingCentral: limited portion of customers notified; core platform not disrupted per company bulletin.
Technical writeup
Verified SaaS contact-data breach — July–August 2026. ShinyHunters listed RingCentral on its leak site around July 27 claiming ~623GB. RingCentral’s security bulletin states remediation completed, no new unauthorized activity observed afterward, a limited portion of customers were affected and notified, and the core platform continued without disruption. Have I Been Pwned analysed leaked data and loaded ~1.6 million RingCentral accounts (names, emails, phones, physical addresses), as reported by BleepingComputer on August 14, 2026. BreachHistory updates recordsAffected to 1600000 (HIBP) and companyConfirmed true.
Root cause
ShinyHunters pay-or-leak campaign (Jul 2026; ~623GB claimed); company confirmed limited customer impact and remediation; HIBP loaded leaked corpus