RingCentral's breach didn't need malware - just a convincing phone call.
Have I Been Pwned has logged 1.6 million records tied to RingCentral, following a leak first reported on August 14. A spokesperson for the extortion group ShinyHunters says the group got in by voice-phishing a RingCentral employee - calling and talking their way past whatever verification was in place. There's no claim of a software exploit or unpatched vulnerability behind this one. RingCentral itself has not confirmed the intrusion; the account so far comes solely from ShinyHunters.
That distinction matters. A patchable flaw gets a patch. A staffer who can be talked into handing over access is a much harder problem, and it's the same playbook ShinyHunters and similar groups have leaned on across a string of recent breaches. If the claim holds up, 1.6 million records left RingCentral not because of bad code, but because of a well-rehearsed script and a receptive ear.
Firewalls don't answer the phone. People do - and that's still the softest target in the building.