Some 1.6 million unique email addresses tied to RingCentral have been leaked online, alongside names, physical addresses, and phone numbers, according to Have I Been Pwned. RingCentral disclosed the breach on July 28 and said \u201cit was the target of a sophisticated social engineering campaign\u201d affecting a \u201climited portion of RingCentral customers.\u201d The comms platform said that it promptly responded to the intrusion upon detecting it, \u201ctook steps to stop the unauthorized activity,\u201d and immediately launched an investigation into the security incident with help from a \u201cleading third-party forensic firm.\u201d \u201cWe have not seen any new unauthorized activity since taking these remediation efforts,\u201d the company added. RingCentral did not immediately respond to The Register\u2019s request for comment on this story. We will update it as needed. While the company hasn\u2019t named its attacker, notorious data theft and extortion gang ShinyHunters previously claimed it compromised the collaboration platform, according to a post on its data leak site, viewed by The Register. Screenshots of the post also circulated on social media. The crooks claimed they stole more than 623 GB of data, and set a July 30 deadline for RingCentral to pay up – or else the crew would dump the stolen information online. RingCentral apparently didn\u2019t pay the extortion demand, and ShinyHunters followed through on its threat, posting customers\u2019 details on the internet. \u201cThe company failed to reach an agreement with us despite our incredible patience, all the chances and offers we made. They don\u2019t care,\u201d the crims wrote on August 3. A ShinyHunters spokesperson told us that the group broke into RingCentral by voice-phishing an employee and tricking them into giving the crooks their password. This same group, which security sleuth Dominic Alvieri says is his \u201ctop threat group and probably is for most analysts,\u201d has hacked hundreds of organizations since the start of the year, including education tech firms that provide services for schools and universities along with healthcare-sector organizations. Recently, ShinyHunters dumped data stolen from Abbott\u2019s cancer diagnostics business with the leak containing 10.9 million unique email addresses alongside personal and health information. The crooks claim that they made off with more than 30 million rows of customer information, including more than one million Social Security numbers and 7.5 million dates of birth. More concerning, however, they said the haul includes 22 million-plus rows of client notes containing confidential doctor-patient conversations and health information, and more than 20 million medical-order records containing patient IDs, prescription types, order dates, and refill information.\u00ae Editor’s note: This story was amended post-publication with comment from ShinyHunters.<\/p>\n